[ALUG] clamav on etch and cpu usage

[Jenny Hopkins]

On 20/06/07, Brett Parker <iDunno at sommitrealweird.co.uk> wrote:
> On Wed, Jun 20, 2007 at 02:22:57PM +0100, Jenny Hopkins wrote:
> > Hullo there,
> >
> > Our server is running nearly constantly at 100% cpu usage, the culprit
> > being clamscan.
> >
> > Server is running debian stable, so clamav version is 0.90.1-2
> >
> > I see a bug reported here
> > http://bugs.donarmstrong.com/cgi-bin/bugreport.cgi?bug=425661
> >
> > which seems to be for a later version so there's not much point in
> > upgrading clamav.
>
> Are you running clamav as a daemon? How are things getting passed to
> clamscan? Is this part of mailserver setup? What are you running as the
> mail server? If it is part of the mailserver - where is it putting the
> files before scanning them?
>

Brett, thanks.
Yes, clamav is running as a daemon.  I'm running exim4, which passes
things from 'incoming' to Mailscanner, which in turn pushes them
through first clamav and then Spamassassin before sending them back to
exim4 for delivery to local mailboxes.

I think they go to /var/spool/exim4_incoming/ - I can ferret around if
it's significant?

The actual process running is
/usr/bin/clamscan --unzip --jar --tar --tgz --deb --max-ratio=500
--tempdir=/tmp/clamav.13537 -r --disable-summary --stdout
--unrar=/usr/bin/unrar .



> As far as I can tell from that bug report, that's only saying that it
> will use 100% CPU at startup.
>

Oh, ok, beg pudding.

Thanks,

Jenny