[clamav-users] High CPU load during startup/reload of sigs for a long time.

[Thorsten Schöning]

Guten Tag Ralf Hildebrandt,
am Donnerstag, 28. Dezember 2017 um 14:46 schrieben Sie:

> Maybe it's a memory issue? I've had some machines with low memeory
> which took a long time to reload sigs.

I have the opposite, the problmeatic VM has 48 GB RAM assigned and
most of that is used by caches and buzffers already. It's only around
10 GB used by apps etc.

> I used "strace -c -p 2906" and issued a "kill -SIGUSR2 2906" in
> another window and got these stats for the reload of the signatures:

My table looks a bit different than yours. I guess the more "read"
calls are because I have unofficial sigs in use, but I wonder if the
higher number of "usecs/call" is of any interest. I would have assumed
that all sigs are already cached in the VM, making reading those
inexpensive. Additionally, I don't see any reasonable I/O in the VM or
host.

% time     seconds  usecs/call     calls    errors syscall
------ ----------- ----------- --------- --------- ----------------
 96.57    0.641536           4    142989           read
  3.32    0.022027           6      3919           mmap
  0.04    0.000293           0      3917           munmap
  0.04    0.000239           4        66           fstat
  0.03    0.000231           5        48           lseek
  0.00    0.000000           0        17           write
  0.00    0.000000           0        64           open
  0.00    0.000000           0        76           close
  0.00    0.000000           0        56           stat
  0.00    0.000000           0         4           poll
  0.00    0.000000           0         4           mprotect
  0.00    0.000000           0         5           brk
  0.00    0.000000           0         1         1 rt_sigreturn
  0.00    0.000000           0        32        30 ioctl
  0.00    0.000000           0        10         8 access
  0.00    0.000000           0         2           select
  0.00    0.000000           0         6           dup
  0.00    0.000000           0         4           socket
  0.00    0.000000           0         4         3 connect
  0.00    0.000000           0         1           sendto
  0.00    0.000000           0         3           recvfrom
  0.00    0.000000           0         1           getsockopt
  0.00    0.000000           0         1           uname
  0.00    0.000000           0         5           fcntl
  0.00    0.000000           0         6           getdents
  0.00    0.000000           0         2           futex
  0.00    0.000000           0         1         1 restart_syscall
  0.00    0.000000           0        66           clock_gettime
  0.00    0.000000           0         2           openat
  0.00    0.000000           0         1           sendmmsg
------ ----------- ----------- --------- --------- ----------------
100.00    0.664326                151313        43 total

Mit freundlichen Grüßen,

Thorsten Schöning

-- 
Thorsten Schöning       E-Mail: Thorsten.Schoening at AM-SoFT.de
AM-SoFT IT-Systeme      http://www.AM-SoFT.de/

Telefon...........05151-  9468- 55
Fax...............05151-  9468- 88
Mobil..............0178-8 9468- 04

AM-SoFT GmbH IT-Systeme, Brandenburger Str. 7c, 31789 Hameln
AG Hannover HRB 207 694 - Geschäftsführer: Andreas Muchow