Re: [Clamav-users] clamav-milter hanging

2004-05-01 Thread Joe Maimon


Angelo Turetta wrote:

Do you have any suggestion as to what might be triggering a fatal hanging of
clamav-milter on my server?
This is FreeBSD 4.9-STABLE (cvsup about march 25th), with sendmail
8.12.11/8.12.11, clamav0.70 from ports (but it showed up the same with
0.67-1)
When this happens, I see a lot of clamav-milter processes equally partaging
100% cpu (see attached ps output), with uptime showing a load of [n. of
milter processes], and sendmail stopping processing mail due to excessive
system load.
I even tried lowering the -max-children from 50 to 5, but this parameter is
obviously not controlling the number of processes.
 

Recent threads and a patch of mine at http://www.jmaimon.com/clamav are 
addressed at trying to resolve the max-children issue.

The mail log doesn't contain anything particularly vicious, the only strange
thing is a lot of ' did not issue MAIL/EXPN/VRFY/ETRN during
connection to MTA' (about 4 to 10 per hour) with  every time different
and having nothing to do with this server (which is a company mail server
with very little roaming usage, and at most 1000-2000 messages per day)
System log is absolutely quiet, while clamd.log (fragment atached) shows
some strange behaviour. Tonight, for example, at about midnight, it seems
the database was reloaded, and since then the virus-rate dropped from 10-20
per hour to 2 in 6 hours. I suppose this might be the initial event.
It all seems to have begun last week when I also installed spamass-milter on
the same server, but that may be coincidence, because since the same day the
server became the primary MX for the domain, while previously it had an
upstream mail server intercepting viruses, and so clamd was a lot more idle
than now.
Thanks for any hints,
Angelo.
 

 

Try reconfiguring with --enable-debug and  recompiling, so that you 
might be able to debug the processes. Also try strace or similar on the 
hung processes.

---
This SF.Net email is sponsored by: Oracle 10g
Get certified on the hottest thing ever to hit the market... Oracle 10g. 
Take an Oracle 10g class now, and we'll give you the exam FREE. 
http://ads.osdn.com/?ad_id=3149&alloc_id=8166&op=click
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users


[Clamav-users] clamav-milter hanging

2004-05-01 Thread Angelo Turetta
Do you have any suggestion as to what might be triggering a fatal hanging of
clamav-milter on my server?

This is FreeBSD 4.9-STABLE (cvsup about march 25th), with sendmail
8.12.11/8.12.11, clamav0.70 from ports (but it showed up the same with
0.67-1)

When this happens, I see a lot of clamav-milter processes equally partaging
100% cpu (see attached ps output), with uptime showing a load of [n. of
milter processes], and sendmail stopping processing mail due to excessive
system load.

I even tried lowering the -max-children from 50 to 5, but this parameter is
obviously not controlling the number of processes.

The mail log doesn't contain anything particularly vicious, the only strange
thing is a lot of ' did not issue MAIL/EXPN/VRFY/ETRN during
connection to MTA' (about 4 to 10 per hour) with  every time different
and having nothing to do with this server (which is a company mail server
with very little roaming usage, and at most 1000-2000 messages per day)
System log is absolutely quiet, while clamd.log (fragment atached) shows
some strange behaviour. Tonight, for example, at about midnight, it seems
the database was reloaded, and since then the virus-rate dropped from 10-20
per hour to 2 in 6 hours. I suppose this might be the initial event.

It all seems to have begun last week when I also installed spamass-milter on
the same server, but that may be coincidence, because since the same day the
server became the primary MX for the domain, while previously it had an
upstream mail server intercepting viruses, and so clamd was a lot more idle
than now.

Thanks for any hints,
Angelo.
25763  ??  Ss 0:01.92 /usr/local/sbin/clamav-milter --local --outgoing -d -N 
--max-children=5 --postmaster=aturetta+virus --p
26787  ??  R134:31.79 /usr/local/sbin/clamav-milter --local --outgoing -d -N 
--max-children=5 --postmaster=aturetta+virus --p
26794  ??  R133:26.22 /usr/local/sbin/clamav-milter --local --outgoing -d -N 
--max-children=5 --postmaster=aturetta+virus --p
26798  ??  R132:56.27 /usr/local/sbin/clamav-milter --local --outgoing -d -N 
--max-children=5 --postmaster=aturetta+virus --p
26908  ??  R119:25.82 /usr/local/sbin/clamav-milter --local --outgoing -d -N 
--max-children=5 --postmaster=aturetta+virus --p
26927  ??  R117:25.31 /usr/local/sbin/clamav-milter --local --outgoing -d -N 
--max-children=5 --postmaster=aturetta+virus --p
26976  ??  R115:13.21 /usr/local/sbin/clamav-milter --local --outgoing -d -N 
--max-children=5 --postmaster=aturetta+virus --p
27213  ??  R 99:53.27 /usr/local/sbin/clamav-milter --local --outgoing -d -N 
--max-children=5 --postmaster=aturetta+virus --p
28779  ??  R 21:13.64 /usr/local/sbin/clamav-milter --local --outgoing -d -N 
--max-children=5 --postmaster=aturetta+virus --p
28875  ??  R 16:27.23 /usr/local/sbin/clamav-milter --local --outgoing -d -N 
--max-children=5 --postmaster=aturetta+virus --p
29325  ??  R  1:16.21 /usr/local/sbin/clamav-milter --local --outgoing -d -N 
--max-children=5 --postmaster=aturetta+virus --p



clamd-fragment.log
Description: Binary data