Threaded Mode | Linear Mode

hendry · 02-26-2008 07:08 AM

My server is running Debian 4 with RC2 on it. It did run very well for a whole time, but now the amavis / clamav process is hanging on 100% and email is in the meanwhile not delivered. When looking at the running services i see:

Quote:Tasks: 83 total, 5 running, 78 sleeping, 0 stopped, 0 zombie
Cpu(s): 99.7%us, 0.3%sy, 0.0%ni, 0.0%id, 0.0%wa, 0.0%hi, 0.0%si, 0.0%st
Mem: 516872k total, 506872k used, 10000k free, 15484k buffers
Swap: 2104504k total, 0k used, 2104504k free, 174200k cached

PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND
2751 amavis 25 0 48812 43m 1284 R 33.2 8.5 2:00.31 clamscan
2142 clamav 25 0 49700 43m 840 R 32.9 8.6 2:57.91 clamd
2750 amavis 25 0 48808 43m 1284 R 32.6 8.5 2:00.63 clamscan
2270 ntop 18 0 104m 35m 2296 S 0.3 7.1 0:02.05 ntop

One of my users told me that he has send an email with attachements for 14 MB. Is there a way to exclude this kind of attachements from scanning?
Any other suggestions why these processes are hanging?

**rbtux** · 02-26-2008 07:26 AM

well you are a litte short of memory... When you can upgrade 256 to 512 Mb you could move the amavis spool directory to a ramdisk. This speeds up the cases where the 14mb attachment are compressed archives...

the exclude of big attachments from scanning is IMHO not good idea...

hendry · 02-26-2008 07:33 AM

rbtux Wrote:well you are a litte short of memory... When you can upgrade 256 to 512 Mb you could move the amavis spool directory to a ramdisk. This speeds up the cases where the 14mb attachment are compressed archives...

the exclude of big attachments from scanning is IMHO not good idea...

Server is already running with 512 mb of memory and because this is a rented dedicated server I cannot upgrade the memory Sad

My installation was standard, is it a good idea to follow the How to run on a low resources system and disable for example BIND and tune Apache?

Why isn't it a good idea to exclude?

**rbtux** · 02-26-2008 07:33 AM

btw afair the defaults of clamav are that it doesn't scan archives bigger than 10M...

**rbtux** · 02-26-2008 07:55 AM

hendry Wrote:Why isn't it a good idea to exclude?

Because in my expirience there are only 2 or 3 files a day which are that big and not archives. So it doesn't really matter.

When you not have more resources you should consider following the tutorial. BUT 512 mb is simply not enough for such a full featured system...

**joximu** · 02-26-2008 08:11 AM

I'm still searching the link to ispCP... Smile

**rbtux** · 02-26-2008 08:28 AM

this might take a while Big Grin

Quemeros · 05-07-2008 02:32 AM

Im equal... but with 2GB... its root... Only for testing now

Code:

Cpu(s): 99.7%us,  0.2%sy,  0.0%ni,  0.0%id,  0.0%wa,  0.0%hi,  0.2%si,  0.0%st

Mem:   2028964k total,   433044k used,  1595920k free,     8008k buffers

Swap:  1951736k total,        0k used,  1951736k free,   103044k cached

  PID USER      PR  NI  VIRT  RES  SHR S %CPU %MEM    TIME+  COMMAND

 3034 amavis    25   0 64832  39m 1372 R   99  2.0  15:34.13 clamscan

 3033 amavis    25   0 77032  51m 1408 R   50  2.6   7:50.79 clamscan

 2549 clamav    25   0 80480  50m  524 R   50  2.6   7:58.24 clamd

20minutes leater...

Tasks: 101 total,   3 running,  98 sleeping,   0 stopped,   0 zombie

Cpu(s):100.0%us,  0.0%sy,  0.0%ni,  0.0%id,  0.0%wa,  0.0%hi,  0.0%si,  0.0%st

Mem:   2028964k total,   466636k used,  1562328k free,    10004k buffers

Swap:  1951736k total,        0k used,  1951736k free,   105612k cached

  PID USER      PR  NI  VIRT  RES  SHR S %CPU %MEM    TIME+  COMMAND

 3034 amavis    25   0 79276  53m 1408 R  100  2.7  31:56.95 clamscan

 3139 amavis    25   0 79668  54m 1404 R  100  2.7  12:05.15 clamscan

    1 root      18   0  6124  676  560 S    0  0.0   0:01.97 init

hendry · 05-07-2008 02:54 AM

Quemeros Wrote:Im equal... but with 2GB... its root... Only for testing now

I used the repository of clamav directly and installed the latest version. My problem was solved after that

Quemeros · 05-07-2008 06:14 AM

Thanks man... for my luck i found one "error" in the AMaVis config, that make AMaVis back to normal... but Clamav still making problems for aprox. 10 mins from it starts...
I just go to learn how to do that you say Smile

(i'm new in with this xD)
------------------------------------ EDIT -------------------------
jajajaj i don't stand what means "repository"... Now i stand perfectly what you say, don't use apt-get, go direct to clamav web page to get files there Smile

THANKS A LOT HENDRY!

Threaded Mode \| Linear Mode [OT: LOW RAM] Server running 100%
Author	Message