From clamav-users-bounces@lists.clamav.net Mon Nov 2 23:10:53 2009 Return-Path: X-Original-To: list@tad.clamav.net Delivered-To: list@tad.clamav.net X-Virus-Scanned: Debian amavisd-new at tad.clamav.net Received: from tad.clamav.net ([127.0.0.1]) by localhost (tad.clamav.net [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8uyx5u7B1zhS; Mon, 2 Nov 2009 23:10:53 +0100 (CET) Received: from tad.clamav.net (localhost.localdomain [127.0.0.1]) by tad.clamav.net (Postfix) with ESMTP id DBCD916C021; Mon, 2 Nov 2009 23:10:50 +0100 (CET) X-Original-To: clamav-users@tad.clamav.net Delivered-To: clamav-users@tad.clamav.net X-Virus-Scanned: Debian amavisd-new at tad.clamav.net Received: from tad.clamav.net ([127.0.0.1]) by localhost (tad.clamav.net [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id EcxjPDVxWNXb for ; Mon, 2 Nov 2009 23:10:48 +0100 (CET) Received: from mailgate.vbhcs.org (mailgate.vbhcs.org [65.83.58.34]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by tad.clamav.net (Postfix) with ESMTPS id 86BF116C00A for ; Mon, 2 Nov 2009 23:10:48 +0100 (CET) X-Virus-Scanned: amavisd-new at vbhcs.org Received: from mgate2.vbhcs.org ([127.0.0.1]) by localhost (mailgate.vbhcs.org [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id j1+zh08UjB57 for ; Mon, 2 Nov 2009 16:10:45 -0600 (CST) X-Submission: from [192.168.5.109] (adsl-19-217-26.bna.bellsouth.net [68.19.217.26]) (using TLSv1 with cipher DHE-RSA-CAMELLIA256-SHA (256/256 bits)) (No client certificate requested) (Authenticated sender: njones) by mgate2.vbhcs.org (Postfix) with ESMTPSA id 2AF3179789E for ; Mon, 2 Nov 2009 16:10:45 -0600 (CST) (envelope-from njones@megan.vbhcs.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=megan.vbhcs.org; s=mailgate; t=1257199845; bh=sPvLOe951tWVg/ZVslnmEG/KGD7SP5Oi6DIVYNJIswQ=; h=Message-ID:Date:From:Reply-To:MIME-Version:To:Subject:References: In-Reply-To:Content-Type:Content-Transfer-Encoding; b=XOyaMpDyAtrOmZLY4dPMt8wZot0mivhBl/AiX3s+Kzt/0x77ebeLko5Q3K2iNaS9I mEo6UyodFT5WLFkJPYPXD0kfYquOyOuEZ/cu678oqa9Y2wQdeb2J7OVpye1aejDAJc /pkJIT64TEhMVDxx63o2Qab2Ku2kp4E21eQT4WxI= Message-ID: <4AEF58E3.9050707@megan.vbhcs.org> Date: Mon, 02 Nov 2009 16:10:43 -0600 From: Noel Jones User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.9.1.4pre) Gecko/20090915 Thunderbird/3.0b4 MIME-Version: 1.0 To: clamav-users@lists.clamav.net References: <38f465650911021142u4dda278fkbc5cd5eb7fc96bab@mail.gmail.com> In-Reply-To: <38f465650911021142u4dda278fkbc5cd5eb7fc96bab@mail.gmail.com> X-Virus-Scanned: clamav-milter 0.95.3 at mgate2.vbhcs.org X-Virus-Status: Clean Subject: Re: [Clamav-users] load issues due to sanesecurity signatures X-BeenThere: clamav-users@lists.clamav.net X-Mailman-Version: 2.1.11 Precedence: list Reply-To: ClamAV users ML List-Id: ClamAV users ML List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="us-ascii"; Format="flowed" Sender: clamav-users-bounces@lists.clamav.net Errors-To: clamav-users-bounces@lists.clamav.net On 11/2/2009 1:42 PM, Avinash wrote: > Hi everyone, > > We are using Sanesecurity signatures in clamd for scanning mails. Recently > we are seeing some load issues on clamd server due to sanesecurity > signatures (load is automatically decreasing when the sanesecurity sigs are > removed) > > Does anyone face this issue before? Sanesecurity sigs are much needed to > catch spam, is these anyway that i can fix this issue? Please help me. > > Likely just one of the signature files is causing problems. Try disabling them one at a time until load comes down to an acceptable level. I'd start with winnow.complex.patterns.ldb. -- Noel Jones _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml