Hi, I'm running sendmail+mimedefang+clamav on a bunch of MX servers.
This morning over a period of several hours each of my instances appear to have caused clamd to consume all RAM and swap. Normally swap is empty and 10GB of the 16GB per host is free. This happened immediately following db updates, but hours apart, and all the systems have matching db updates centrally distributed here, so I suspect some e-mail message payload was the commonality. Has anyone else had similar experiences recently? All the clamd Limits settings are as default. CentOS Linux release 7.9.2009 (Core) clamav-0.104.0 (current stable release) Oct 31 09:01:39 imx1 clamd: Database correctly reloaded (12623346 signatures) Oct 31 09:01:39 imx1 clamd: Activating the newly loaded database... Oct 31 09:02:51 imx1 kernel: mimedefang.pl invoked oom-killer: gfp_mask=0x280da, order=0, oom_score_adj=0 Oct 31 09:02:51 imx1 kernel: mimedefang.pl cpuset=/ mems_allowed=0 Oct 31 09:02:51 imx1 kernel: CPU: 2 PID: 30341 Comm: mimedefang.pl Kdump: loaded Not tainted 3.10.0-1160.42.2.el7.x86_64 #1 Oct 31 09:02:51 imx1 kernel: Hardware name: ... Oct 31 09:02:51 imx1 kernel: Call Trace: Oct 31 09:02:51 imx1 kernel: [<ffffffffb9583539>] dump_stack+0x19/0x1b Oct 31 09:02:51 imx1 kernel: [<ffffffffb957e5d8>] dump_header+0x90/0x229 Oct 31 09:02:51 imx1 kernel: [<ffffffffb8f06992>] ? ktime_get_ts64+0x52/0xf0 .... Oct 31 09:02:51 imx1 kernel: Out of memory: Kill process 5336 (clamd) score 92 or sacrifice child Oct 31 09:02:51 imx1 kernel: Killed process 5336 (clamd), UID 8, total-vm:3399696kB, anon-rss:1774440kB, file-rss:0kB, shmem-rss:0kB Oct 31 09:02:51 imx1 systemd: clamav-daemon.service: main process exited, code=killed, status=9/KILL Oct 31 09:02:51 imx1 systemd: Unit clamav-daemon.service entered failed state. Oct 31 09:02:51 imx1 systemd: clamav-daemon.service failed. -- Mark G. Thomas <m...@misty.com>, KC3DRE _______________________________________________ clamav-users mailing list clamav-users@lists.clamav.net https://lists.clamav.net/mailman/listinfo/clamav-users Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml
