[prev in list] [next in list] [prev in thread] [next in thread] 

List:       clamav-users
Subject:    Re: [clamav-users] Ubuntu 16.04 - ClamAV with AMAVIS 100% CPU - very few Google results
From:       Reindl Harald <h.reindl () thelounge ! net>
Date:       2017-03-28 21:05:07
Message-ID: cc597ee0-68b7-0b65-ad08-31276cf5b4cf () thelounge ! net
[Download RAW message or body]



Am 28.03.2017 um 23:02 schrieb Antonio Pavletich:
> Thanks for the tip, I found the issue, it was that clamav-daemon was
> running out of memory, crashing & serviced was indeed restarting it (only
> for it the crash again & so it went).

yeah, clamav needs a ordinary amount of memory where others drive a 
dozenzs of production severs with the same hardware...

> On 29 March 2017 at 00:58, Matus UHLAR - fantomas <uhlar@fantomas.sk> wrote:
>
>> On 28.03.17 22:33, Antonio Pavletich wrote:
>>
>>> Since upgrading I'm found clamd is spiking and staying put at 100%.
>>>
>>> I've deleted all files in /var/lib/clamav & re-ran freshclam only to have
>>> the same issue occur on the next inbound email?
>>>
>>
>> top - 11:07:58 up 3 days,  3:49,  2 users,  load average: 2.96, 4.30, 2.19
>>>
>>
>> note that some time after start, clamd loads, virus signatures from disk
>> unpacks them and builds in-memory databse, so it is expected to eat 100% of
>> CPU for a few minutes.
>>
>> logs spew out repeats of the below continuously?
>>>
>>> Tue Mar 28 11:20:19 2017 -> +++ Started at Tue Mar 28 11:20:19 2017
>>> Tue Mar 28 11:20:19 2017 -> Received 1 file descriptor(s) from systemd.
>>>
>>
>> Tue Mar 28 11:20:27 2017 -> +++ Started at Tue Mar 28 11:20:27 2017
>>> Tue Mar 28 11:20:27 2017 -> Received 1 file descriptor(s) from systemd.
>>>
>>
>> Tue Mar 28 11:20:33 2017 -> +++ Started at Tue Mar 28 11:20:33 2017
>>> Tue Mar 28 11:20:33 2017 -> Received 1 file descriptor(s) from systemd.
>>>
>>
>> this looks like either the clamav process is crashing, or there is an error
>> related to how clamd is started from systemd, so systemd kills it and
>> starts
>> it repeatedly again  and again...
>>
>>
>> --
>> Matus UHLAR - fantomas, uhlar@fantomas.sk ; http://www.fantomas.sk/
>> Warning: I wish NOT to receive e-mail advertising to this address.
>> Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
>> "Two words: Windows survives." - Craig Mundie, Microsoft senior strategist
>> "So does syphillis. Good thing we have penicillin." - Matthew Alton
_______________________________________________
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml
[prev in list] [next in list] [prev in thread] [next in thread]