Re: [clamav-users] High CPU load during startup/reload of sigs for a long time.

2017-12-31 Thread Thorsten Schöning
Guten Tag Pierre Dehaen, am Sonntag, 31. Dezember 2017 um 12:12 schrieben Sie: > Could it be that your are oversubscribing your vCPUs? I mean if you assign > more vCPUs to > your VMs than you physically have then I guess it's expected to see lots of > context switches > on the host, and that wou

Re: [clamav-users] High CPU load during startup/reload of sigs for a long time.

2017-12-31 Thread Pierre Dehaen
On 30 Dec 2017 at 11:52, Thorsten Schöning wrote: > That's the main difference, the VM where I have the problems has 48 GB > of RAM and currently 10 assigned vCPUs, formerly 6. The VMs where this > is not happening have only 2 vCPUs and 6 or 8 GB of RAM, where only 2-4 > GB are in use by apps and

Re: [clamav-users] High CPU load during startup/reload of sigs for a long time.

2017-12-30 Thread Thorsten Schöning
Guten Tag Dennis Peterson, am Donnerstag, 28. Dezember 2017 um 20:25 schrieben Sie: > If I were debugging this I'd want to know if all the vm's run on the same or > different hosts, Different hosts, while the both host are absolutely identical: Same Ubuntu 16.04 LTS Server with same patchlevel, s

Re: [clamav-users] High CPU load during startup/reload of sigs for a long time.

2017-12-29 Thread Al Varnell
On Dec 29, 2017, at 3:29 AM, Thorsten Schöning wrote: > > Only "bytecode.cvd" here is "bytecode.cld" > there, don't know the reason yet. .cvd is compressed and .cld is not (because the latter was updated at some point). Compressed will probably load faster, but it's a small file so probably not

Re: [clamav-users] High CPU load during startup/reload of sigs for a long time.

2017-12-29 Thread Thorsten Schöning
Guten Tag Ralf Hildebrandt, am Donnerstag, 28. Dezember 2017 um 14:46 schrieben Sie: > Maybe it's a memory issue? I've had some machines with low memeory > which took a long time to reload sigs. I have the opposite, the problmeatic VM has 48 GB RAM assigned and most of that is used by caches and

Re: [clamav-users] High CPU load during startup/reload of sigs for a long time.

2017-12-29 Thread Thorsten Schöning
Guten Tag Steve Basford, am Donnerstag, 28. Dezember 2017 um 20:48 schrieben Sie: > Could you list the signatures in you clamav database folders. The following is from the problematic VM, the non-problematic one has practically the same. Only "bytecode.cvd" here is "bytecode.cld" there, don't kno

Re: [clamav-users] High CPU load during startup/reload of sigs for a long time.

2017-12-28 Thread Steve Basford
Could you list the signatures in you clamav database folders. Cheers, Steve Twitter: @sanesecurity ___ clamav-users mailing list clamav-users@lists.clamav.net http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users Help us build a comprehensi

Re: [clamav-users] High CPU load during startup/reload of sigs for a long time.

2017-12-28 Thread Dennis Peterson
If I were debugging this I'd want to know if all the vm's run on the same or different hosts, what the allocation of resources to each vm is, if different hosts then what each host's base loads are for cpu, memory, and disk caching. If you don't own the hosts this can be difficult. Then I'd comp

Re: [clamav-users] High CPU load during startup/reload of sigs for a long time.

2017-12-28 Thread Ralf Hildebrandt
> I used "strace -c -p 2906" and issued a "kill -SIGUSR2 2906" in > another window and got these stats for the reload of the signatures: Also did a "ltrace -c -p 2906": ^C% time seconds usecs/call calls function -- --- --- - 55.85 1

Re: [clamav-users] High CPU load during startup/reload of sigs for a long time.

2017-12-28 Thread Ralf Hildebrandt
> 1. Does clamd scan memory during startup and/or restart?[1] The >problem seems to occur less with less committed memory in the VM. I'm not authoritative on this, but I doubt it. > 3. Does ClamAV use more than one CPU core during startup/reload? Just tried that, I don't see more then 100%,

[clamav-users] High CPU load during startup/reload of sigs for a long time.

2017-12-28 Thread Thorsten Schöning
Hi all, I have some problem with ClamAV for some months now and would like to get some attention on a question I already asked on superuser.com[1] and ask some additional ones to try to better understand the problem. In the end, my problem breaks down to the fact that ClamAV startup or reload bec