Clamav-90_2 Lockup with freebsd 6.2

[Chris]

On 28/02/07, Marko Lerota <mlerota at iskon.hr> wrote:
> Martin Blapp <mb at imp.ch> writes:
>
> > Even with libthr the CPU usage is still far too high ...
> > I'm currently looking at the code.
>
> Take a look at this post. I also have CPU usage problems and simscan
> installed.
>
> http://www.mail-archive.com/toaster@shupp.org/msg04119.html
>
> > Re: [toaster] clamav 0.90 patches up
>
> > Tom Collins
> > Fri, 16 Feb 2007 11:33:52 -0800
>
> > On Feb 15, 2007, at 2:12 PM, Rick Macdougall wrote:
>
> >>  One thing to keep in mind, if you are not using the :attach in simcontrol,
> >> do NOT enable rip mime in simscan as that will cause clamdscan to basically
> >> scan the message and the attachment twice.
>
> >>  Clamav does a very good job of scanning encoded content and attachments
> >> all by itself. No need to duplicate effort.
>
> > I recently took a look at ripmime to see if it had a setting that would simply
> > dump the attachment filenames without actually creating the attachments. It,
> > unfortunately, does not. I haven't looked at the source to see if it would be
> > possible to build a modified version to accomplish my goals or not.
>
> > I guess I could modify my simscan to run ripmime, look at the attachment
> > filenames, and then delete them all before calling clamav. OR, I could
> > simply pass the message file to clamav instead of having it scan the
> > entire directory.
>
> > In the case of large attachments, it's a big waste of CPU cycles to scan
> > the entire message twice. I might just skip attachment blocking at this point,
> > and hope that clamav will catch all of the scr and pif crap.
>
> --
> One cannot sell the earth upon which the people walk
>                                                Tacunka Witco
> _______________________________________________
> freebsd-stable at freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-stable
> To unsubscribe, send any mail to "freebsd-stable-unsubscribe at freebsd.org"
>

I dont use simscan but use clamav for scanning emails passed from
exim.  I noticed that cpu usage went through the roof and there was
dozens of clamd in sockstat.  On a dual xeon it did cause some smtp
lag but on weaker specs it caused the smtp to completely backlog and
stopped emails arriving.

I downgraded back to 0.88.7 again and all is fine again.

Chris