From owner-freebsd-stable@FreeBSD.ORG Thu Mar 1 10:44:53 2007 Return-Path: X-Original-To: freebsd-stable@freebsd.org Delivered-To: freebsd-stable@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 5F56016A400 for ; Thu, 1 Mar 2007 10:44:53 +0000 (UTC) (envelope-from chrcoluk@gmail.com) Received: from nf-out-0910.google.com (nf-out-0910.google.com [64.233.182.186]) by mx1.freebsd.org (Postfix) with ESMTP id EC2F413C46B for ; Thu, 1 Mar 2007 10:44:52 +0000 (UTC) (envelope-from chrcoluk@gmail.com) Received: by nf-out-0910.google.com with SMTP id k27so826620nfc for ; Thu, 01 Mar 2007 02:44:51 -0800 (PST) DKIM-Signature: a=rsa-sha1; c=relaxed/relaxed; d=gmail.com; s=beta; h=domainkey-signature:received:received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=mdsQX+steEml7x4gFZ6RLpcl23lOifhGnLm4sMoqqfNFD3rGMQX6bqVJvH2zyaKvR8A/sDIapsfcC0ctRQYVKjfotkp68O4y7DFGjRbZ461oAixi7gexsHzXjedWbsRiOxCvemD7GoP2L1bXF4gTygv5l4WRY/4avB9oUvdv2Iw= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=beta; h=received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=huDpalqv84hW0Me21zc/zmrjZEyHM0m2AfFPXeaPjf/4XjNy+0aoMOjgxDOoZ6cdEkbvhKBlbNkeP+qLLvyuKcIf6QmnJo4EEHHZQ8SFBSHDNQRDuHqRir2pOrzKz9Yoh6XmcFTjpjafEcNqNQI/uNy5bDrmRAf18CdCByufQf4= Received: by 10.82.120.14 with SMTP id s14mr529930buc.1172744227307; Thu, 01 Mar 2007 02:17:07 -0800 (PST) Received: by 10.82.135.17 with HTTP; Thu, 1 Mar 2007 02:17:06 -0800 (PST) Message-ID: <3aaaa3a0703010217u63e389f2hbe848a8fc42cd9f2@mail.gmail.com> Date: Thu, 1 Mar 2007 10:17:06 +0000 From: Chris To: "Marko Lerota" In-Reply-To: <867iu2gtny.fsf@sparrow.local> MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline References: <003701c75a03$fb478ac0$d801a8c0@dimuthu> <200702270305.l1R35MX2067221@lava.sentex.ca> <20070227035603.GA49430@tmn.ru> <20070227183553.B18301@godot.imp.ch> <867iu2gtny.fsf@sparrow.local> Cc: Martin Blapp , freebsd-stable@freebsd.org Subject: Re: Clamav-90_2 Lockup with freebsd 6.2 X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 01 Mar 2007 10:44:53 -0000 On 28/02/07, Marko Lerota wrote: > Martin Blapp writes: > > > Even with libthr the CPU usage is still far too high ... > > I'm currently looking at the code. > > Take a look at this post. I also have CPU usage problems and simscan > installed. > > http://www.mail-archive.com/toaster@shupp.org/msg04119.html > > > Re: [toaster] clamav 0.90 patches up > > > Tom Collins > > Fri, 16 Feb 2007 11:33:52 -0800 > > > On Feb 15, 2007, at 2:12 PM, Rick Macdougall wrote: > > >> One thing to keep in mind, if you are not using the :attach in simcontrol, > >> do NOT enable rip mime in simscan as that will cause clamdscan to basically > >> scan the message and the attachment twice. > > >> Clamav does a very good job of scanning encoded content and attachments > >> all by itself. No need to duplicate effort. > > > I recently took a look at ripmime to see if it had a setting that would simply > > dump the attachment filenames without actually creating the attachments. It, > > unfortunately, does not. I haven't looked at the source to see if it would be > > possible to build a modified version to accomplish my goals or not. > > > I guess I could modify my simscan to run ripmime, look at the attachment > > filenames, and then delete them all before calling clamav. OR, I could > > simply pass the message file to clamav instead of having it scan the > > entire directory. > > > In the case of large attachments, it's a big waste of CPU cycles to scan > > the entire message twice. I might just skip attachment blocking at this point, > > and hope that clamav will catch all of the scr and pif crap. > > -- > One cannot sell the earth upon which the people walk > Tacunka Witco > _______________________________________________ > freebsd-stable@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-stable > To unsubscribe, send any mail to "freebsd-stable-unsubscribe@freebsd.org" > I dont use simscan but use clamav for scanning emails passed from exim. I noticed that cpu usage went through the roof and there was dozens of clamd in sockstat. On a dual xeon it did cause some smtp lag but on weaker specs it caused the smtp to completely backlog and stopped emails arriving. I downgraded back to 0.88.7 again and all is fine again. Chris