On Mon, Nov 2, 2009 at 5:35 PM, Jason Haar <
Jason.Haar@trimble.co.nz> wrote:
> On 11/03/2009 12:21 PM, Freddie Cash wrote:
>> On a whim, I renamed the clamav database directory, ran freshclam to get
>> just the basic signatures, and restarted clamd. Number of signatures went
>> from 925,000+ to under 600,000, and CPU usage dropped to below 20%. Cleared
>> out 1200 messages from the queue in under 15 minutes. Reran the script to
>> download all the extra signature databases, putting the total back up over
>> 700,000, and still the CPU usage is under 20%.
>
> Do you still have that renamed directory? Can you see what is different
> between the working and non-working dirs? The sansecurity folk would
> probably be interested...
Yes, I still have this directory. If anyone is interested in it, I
can tar it up and make it available. Can also tar up the working
directory is needed.
The same list of database files are in both directories. The number
of backup files created by Bill Landry's download script are different
between the two directories (some showing in only one or the other).
And the number of signatures loaded initially was different (the
number is back up to over 940,000 now).
Haven't had any issues since. System load is under 1.0, CPU usage is
under 20%, mail is flowing through nice and quick.
--
Freddie Cash
fjwcash@gmail.com
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml
(text/plain)