Date: Thu, 1 Mar 2007 10:17:06 +0000 From: Chris <chrcoluk@gmail.com> To: "Marko Lerota" <mlerota@iskon.hr> Cc: Martin Blapp <mb@imp.ch>, freebsd-stable@freebsd.org Subject: Re: Clamav-90_2 Lockup with freebsd 6.2 Message-ID: <3aaaa3a0703010217u63e389f2hbe848a8fc42cd9f2@mail.gmail.com> In-Reply-To: <867iu2gtny.fsf@sparrow.local> References: <003701c75a03$fb478ac0$d801a8c0@dimuthu> <200702270305.l1R35MX2067221@lava.sentex.ca> <20070227035603.GA49430@tmn.ru> <20070227183553.B18301@godot.imp.ch> <867iu2gtny.fsf@sparrow.local>
next in thread | previous in thread | raw e-mail | index | archive | help
On 28/02/07, Marko Lerota <mlerota@iskon.hr> wrote: > Martin Blapp <mb@imp.ch> writes: > > > Even with libthr the CPU usage is still far too high ... > > I'm currently looking at the code. > > Take a look at this post. I also have CPU usage problems and simscan > installed. > > http://www.mail-archive.com/toaster@shupp.org/msg04119.html > > > Re: [toaster] clamav 0.90 patches up > > > Tom Collins > > Fri, 16 Feb 2007 11:33:52 -0800 > > > On Feb 15, 2007, at 2:12 PM, Rick Macdougall wrote: > > >> One thing to keep in mind, if you are not using the :attach in simcontrol, > >> do NOT enable rip mime in simscan as that will cause clamdscan to basically > >> scan the message and the attachment twice. > > >> Clamav does a very good job of scanning encoded content and attachments > >> all by itself. No need to duplicate effort. > > > I recently took a look at ripmime to see if it had a setting that would simply > > dump the attachment filenames without actually creating the attachments. It, > > unfortunately, does not. I haven't looked at the source to see if it would be > > possible to build a modified version to accomplish my goals or not. > > > I guess I could modify my simscan to run ripmime, look at the attachment > > filenames, and then delete them all before calling clamav. OR, I could > > simply pass the message file to clamav instead of having it scan the > > entire directory. > > > In the case of large attachments, it's a big waste of CPU cycles to scan > > the entire message twice. I might just skip attachment blocking at this point, > > and hope that clamav will catch all of the scr and pif crap. > > -- > One cannot sell the earth upon which the people walk > Tacunka Witco > _______________________________________________ > freebsd-stable@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-stable > To unsubscribe, send any mail to "freebsd-stable-unsubscribe@freebsd.org" > I dont use simscan but use clamav for scanning emails passed from exim. I noticed that cpu usage went through the roof and there was dozens of clamd in sockstat. On a dual xeon it did cause some smtp lag but on weaker specs it caused the smtp to completely backlog and stopped emails arriving. I downgraded back to 0.88.7 again and all is fine again. Chris
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3aaaa3a0703010217u63e389f2hbe848a8fc42cd9f2>