The 3 filesizes below are as follows: 70K 260M 80K
This is just one example of the many times the clamd process seems to pause or hang. Thu Mar 4 09:54:03 2021 -> /imports/INPRDSS122/mnt1/Boot/et-EE/bootmgr.exe.mui: OK Thu Mar 4 09:54:03 2021 -> Closed fd 44 Thu Mar 4 09:54:03 2021 -> Finished scanthread Thu Mar 4 09:54:03 2021 -> THRMGR: group_finished: 0x561583a417b0, 10 Thu Mar 4 09:54:03 2021 -> THRMGR: active jobs for 0x561583a417b0: 9 Thu Mar 4 09:54:03 2021 -> THRMGR: queue (single) crossed low threshold -> signaling Thu Mar 4 09:54:03 2021 -> THRMGR: queue (bulk) crossed low threshold -> signaling Thu Mar 4 09:54:03 2021 -> THRMGR: contended, woken Thu Mar 4 09:54:03 2021 -> Consumed entire command Thu Mar 4 09:54:03 2021 -> got command IDSESSION (10, 13), argument: Thu Mar 4 09:54:03 2021 -> THRMGR: new group: 0x5615837aa6e0 Thu Mar 4 09:54:03 2021 -> got command FILDES (7, 11), argument: Thu Mar 4 09:54:03 2021 -> RECVTH: FILDES command complete Thu Mar 4 09:54:03 2021 -> THRMGR: active jobs for 0x5615837aa6e0: 2 Thu Mar 4 09:54:03 2021 -> THRMGR: contended, sleeping Thu Mar 4 09:55:04 2021 -> /imports/INPRDSUPDS121_1/mnt2/UPDs/UVHD-S-1-5-21-3556941465-1377616134-1990869325-122888.vhdx: OK Thu Mar 4 09:55:04 2021 -> Closed fd 178 Thu Mar 4 09:55:04 2021 -> Finished scanthread Thu Mar 4 09:55:04 2021 -> THRMGR: group_finished: 0x5615837bee00, 17 Thu Mar 4 09:55:04 2021 -> THRMGR: active jobs for 0x5615837bee00: 16 Thu Mar 4 09:55:04 2021 -> THRMGR: queue (single) crossed low threshold -> signaling Thu Mar 4 09:55:04 2021 -> THRMGR: queue (bulk) crossed low threshold -> signaling Thu Mar 4 09:55:04 2021 -> THRMGR: contended, woken Thu Mar 4 09:55:04 2021 -> Consumed entire command Thu Mar 4 09:55:04 2021 -> got command IDSESSION (10, 13), argument: Thu Mar 4 09:55:04 2021 -> THRMGR: new group: 0x5615837aa760 Thu Mar 4 09:55:04 2021 -> got command FILDES (7, 11), argument: Thu Mar 4 09:55:04 2021 -> RECVTH: FILDES command complete Thu Mar 4 09:55:04 2021 -> THRMGR: active jobs for 0x5615837aa760: 2 Thu Mar 4 09:55:04 2021 -> THRMGR: contended, sleeping Thu Mar 4 09:55:04 2021 -> /imports/INPMBXFERS121/mnt1/Boot/de-DE/bootmgr.exe.mui: OK Thu Mar 4 09:55:04 2021 -> Closed fd 46 Thu Mar 4 09:55:04 2021 -> Finished scanthread Thu Mar 4 09:55:04 2021 -> THRMGR: group_finished: 0x5615837b87f0, 10 Thu Mar 4 09:55:04 2021 -> THRMGR: active jobs for 0x5615837b87f0: 9 Thu Mar 4 09:55:04 2021 -> THRMGR: queue (single) crossed low threshold -> signaling Thu Mar 4 09:55:04 2021 -> THRMGR: queue (bulk) crossed low threshold -> signaling Thu Mar 4 09:55:04 2021 -> THRMGR: contended, woken Thu Mar 4 09:55:04 2021 -> Consumed entire command Thu Mar 4 09:55:04 2021 -> got command IDSESSION (10, 13), argument: Thu Mar 4 09:55:04 2021 -> THRMGR: new group: 0x5615837aa7e0 On Wed, Mar 3, 2021 at 4:30 AM G.W. Haywood via clamav-users < clamav-users@lists.clamav.net> wrote: > Hi there, > > On Tue, 2 Mar 2021, Michael Kyriacou via clamav-users wrote: > > > I am scanning large Data sets for a company. These file systems have > > hundreds of thousands of files in them. Most files are small in size, > <1GB, > > while a few are large, >10GB. Most files are documents, archives, and > > executables. I am scanning them to detect if there are any malware. > > > > These are virtual machines, running Ubuntu 20.04. > > The cpu on the esxi host is an Intel Xeon Platinum 828 CPu @2.70GHz. I > have > > in total, 112 logical processors available, and 512 GB of RAM. > > > > The message it says is the following: > > ———————————————— > > Got command FILDES(7,11) argument > > RECVTH FILDES command complete > > THMGR active jobs for ***********: 2 > > THRMGR: Contended, sleeping > > ———————————————— > > Please _cut_and_paste_ the exact messages that you are seeing, not some > approximation to it. > It might also help if you can get your logging system(s) to prepend > timestamps. It's usual > to see (and I'm much more comfortable with) logs which look something like > this: > > Wed Mar 3 09:13:45 2021 -> Got new connection, FD 10 > Wed Mar 3 09:13:45 2021 -> Received POLLIN|POLLHUP on fd 6 > Wed Mar 3 09:13:45 2021 -> fds_poll_recv: timeout after 30 seconds > Wed Mar 3 09:13:45 2021 -> Received POLLIN|POLLHUP on fd 10 > Wed Mar 3 09:13:45 2021 -> got command ALLMATCHINSTREAM (17, 24), > argument: > Wed Mar 3 09:13:45 2021 -> Receive thread: INSTREAM: > /EXPORTS/clamav/tmp/tcp3/clamav-dc107bae2242d939f16bcf2bf9dd409c.tmp fd 11 > Wed Mar 3 09:13:45 2021 -> Breaking command loop, mode is no longer > MODE_COMMAND > Wed Mar 3 09:13:45 2021 -> Moved partial command: 4086 > Wed Mar 3 09:13:45 2021 -> mode == MODE_STREAM > Wed Mar 3 09:13:45 2021 -> Got chunksize: 8314 > Wed Mar 3 09:13:45 2021 -> Quota Remaining: 52420486 > Wed Mar 3 09:13:45 2021 -> Processed 4082 bytes of chunkdata, pos 4 > Wed Mar 3 09:13:45 2021 -> fds_poll_recv: timeout after 120 seconds > Wed Mar 3 09:13:45 2021 -> Received POLLIN|POLLHUP on fd 10 > Wed Mar 3 09:13:45 2021 -> Moved partial command: 4104 > Wed Mar 3 09:13:45 2021 -> mode == MODE_STREAM > Wed Mar 3 09:13:45 2021 -> Processed 4104 bytes of chunkdata, pos 0 > Wed Mar 3 09:13:45 2021 -> fds_poll_recv: timeout after 120 seconds > Wed Mar 3 09:13:45 2021 -> Received POLLIN|POLLHUP on fd 10 > Wed Mar 3 09:13:45 2021 -> Moved partial command: 133 > Wed Mar 3 09:13:46 2021 -> mode == MODE_STREAM > Wed Mar 3 09:13:46 2021 -> Processed 128 bytes of chunkdata, pos 0 > Wed Mar 3 09:13:46 2021 -> Got chunksize: 0 > Wed Mar 3 09:13:46 2021 -> Chunks complete > Wed Mar 3 09:13:46 2021 -> Number of file descriptors polled: 1 fds > Wed Mar 3 09:13:46 2021 -> fds_poll_recv: timeout after 9996 seconds > Wed Mar 3 09:13:46 2021 -> THRMGR: queue (single) crossed low threshold > -> signaling > Wed Mar 3 09:13:46 2021 -> THRMGR: queue (bulk) crossed low threshold -> > signaling > Wed Mar 3 09:13:46 2021 -> instream(192.168.44.25@45066): OK > Wed Mar 3 09:13:46 2021 -> Finished scanthread > Wed Mar 3 09:13:46 2021 -> Scanthread: connection shut down (FD 10) > Wed Mar 3 09:13:46 2021 -> THRMGR: queue (single) crossed low threshold > -> signaling > Wed Mar 3 09:13:46 2021 -> THRMGR: queue (bulk) crossed low threshold -> > signaling > > -- > > 73, > Ged. > > _______________________________________________ > > clamav-users mailing list > clamav-users@lists.clamav.net > https://lists.clamav.net/mailman/listinfo/clamav-users > > > Help us build a comprehensive ClamAV guide: > https://github.com/vrtadmin/clamav-faq > > http://www.clamav.net/contact.html#ml >
_______________________________________________ clamav-users mailing list clamav-users@lists.clamav.net https://lists.clamav.net/mailman/listinfo/clamav-users Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml
