Re: [clamav-users] ClamAV consumes so much memory that my Postfix service gets killed by OOM Killer from time to time

[Turritopsis Dohrnii Teo En Ming via clamav-users]

Sent with Proton Mail secure email.

On Wednesday, March 5th, 2025 at 11:14 PM, Matus UHLAR - fantomas via 
clamav-users <clamav-users@lists.clamav.net> wrote:

> > > > > > On Tue, 4 Mar 2025, Turritopsis Dohrnii Teo En Ming via 
> > > > > > clamav-users wrote:
> > > > > > 
> > > > > > > ClamAV consumes so much memory that my Postfix service gets killed
> > > > > > > by OOM Killer from time to time.
> > > > > 
> > > > > On 04.03.25 15:52, Andrew C Aitchison via clamav-users wrote:
> > > > > 
> > > > > > Yes, ClamAV needs 1-2GB RAM to store the database of malware to 
> > > > > > search for
> > > > > 
> > > > > this applies to "clamd" and every "clamscan" instance.
> > > > > OP mentioned using clamscan.
> > > > > 
> > > > > BTW it's usually about 1.5GB with standard databases.
> > > > > 
> > > > > > and double that when it loads an updated database (this doubling 
> > > > > > can be
> > > > > > avoided but then ClamAV is unavailable while the update is loaded).
> > > > > 
> > > > > This applies to "clamd". But even in case of DB reloading it's less 
> > > > > than 3
> > > > > clamscan instances.
> > > > > 
> > > > > I've had problems reloading 32-bit clamav when I loaded hude 3rd 
> > > > > party DB.
> > > > > 
> > > > > > The database of malware could be trimmed by looking for fewer 
> > > > > > viruses etc.
> > > > > > but I think that would be above your skill level, and it would 
> > > > > > increase
> > > > > > the chance of something nasty getting past your defences.
> > > > > > 
> > > > > > You could try increasing the size of the swap file/partition;
> > > > > > this could make the machine slower some of the time, but might make
> > > > > > the OOM Killer less likely to kick in.
> > > 
> > > > On Wednesday, March 5th, 2025 at 1:20 AM, Matus UHLAR - fantomas via 
> > > > clamav-users clamav-users@lists.clamav.net wrote:
> > > > 
> > > > > The solution was already proposed: using clamd and clamsdcan.
> > > 
> > > On 05.03.25 13:26, Turritopsis Dohrnii Teo En Ming via clamav-users wrote:
> > > 
> > > > There is no clamdscan option in Virtualmin. I have already switched 
> > > > from clamscan to clamd.
> 
> > On Wednesday, March 5th, 2025 at 9:59 PM, Matus UHLAR - fantomas via 
> > clamav-users clamav-users@lists.clamav.net wrote:
> > 
> > > If you carefully read the docs at
> > > https://www.virtualmin.com/docs/server-components/spam-and-virus-scanning/
> > > 
> > > you will see that the option "Enable ClamAV Server." will use clamdscan:
> > > 
> > > Virtualmin will check if clamd and clamdscan are working properly, and
> > > if so configure all virtual servers to use it for virus classification
> > > from now on.
> > > 
> > > clamdscan is replacement for clamscan which uses clamav daemon instead of
> > > loading the virus database for every executed process.
> 
> 
> On 05.03.25 14:26, Turritopsis Dohrnii Teo En Ming wrote:
> 
> > I have checked my Virtualmin settings again.
> > 
> > There is no clamdscan option available.
> > 
> > I am using clamd now. Not clamscan any more.
> 
> 
> But you did not read the link I have sent you.
> The "clamd" option uses clamdscan (instead of clamscan).

I think the article is too lengthy.

Regards,

Mr. Turritopsis Dohrnii Teo En Ming
Targeted Individuals in Singapore
GIMP = Government-Induced Medical Problems
6th March 2025 Thursday

> 
> 
> --
> Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
> Warning: I wish NOT to receive e-mail advertising to this address.
> Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
> Enter any 12-digit prime number to continue.
> _______________________________________________
> 
> Manage your clamav-users mailing list subscription / unsubscribe:
> https://lists.clamav.net/mailman/listinfo/clamav-users
> 
> 
> Help us build a comprehensive ClamAV guide:
> https://github.com/Cisco-Talos/clamav-documentation
> 
> https://docs.clamav.net/#mailing-lists-and-chat
_______________________________________________

Manage your clamav-users mailing list subscription / unsubscribe:
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/Cisco-Talos/clamav-documentation

https://docs.clamav.net/#mailing-lists-and-chat