Re: [Clamav-users] clamdscan load high...

From: B $B%F%+%M!W <rokmn3309(at)hotmail.com>
Date: Mon Jun 25 2007 - 04:43:05 EDT

What are your clamd.conf settings?
=> that is my clamd.conf

LogSyslog yes
LocalSocket /tmp/clamd
FixStaleSocket yes
MaxThreads 50
User clamav
Foreground yes
ScanMail yes
ClamukoMaxFileSize 20M

Your hardware?
=>xeon 2.80 dual, memroy 1G, one scsi hdd

How many incoming emails/second?
=>that is a weekly data recently

         Max                      Average                 Current 

bits 244.8 kbits (15.9%) 2275.0 bits (0.1%) 1532.0 bits (0.1%) bits 244.8 kbits (15.9%) 2275.0 bits (0.1%) 1532.0 bits (0.1%)

Maybe your server just got flooded with emails.
=>i don't think, now i not run clamd. uptime is 0.xx~2 or 3, max is 5

What if you scan only that file? What is the load then?
=>mm, i seen 3~4mail the same period..

   i don't know, just i killed, and system load is down..

I don't see clamd in your output. Clamd is the process doing the scan, clamdscan just gives it what to scan.
It might be that clamd is already very busy scanning other files. If its scanning only stuff from qmail, can you get a snapshot of /var/spool/qscan/tmp when this happens?
=> you means that same problem happened and same period
/var/spool/qscan/tmp
directory send you?

---

$B$"$N(BYMO 3$B?M$+$i$N(BLIVE EARTH $B$K8~$1$F$N%a%C%;!<%8F02h$rG[?.Cf!*(B http://liveearth.jp.msn.com/

---

Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html Received on Mon Jun 25 04:43:45 2007