[clamav-users] Ubuntu 16.04 - ClamAV with AMAVIS 100% CPU - very few Google results

[Antonio Pavletich]

Thanks for the tip, I found the issue, it was that clamav-daemon was
running out of memory, crashing & serviced was indeed restarting it (only
for it the crash again & so it went).


On 29 March 2017 at 00:58, Matus UHLAR - fantomas <uhlar at fantomas.sk> wrote:

> On 28.03.17 22:33, Antonio Pavletich wrote:
>
>> Since upgrading I'm found clamd is spiking and staying put at 100%.
>>
>> I've deleted all files in /var/lib/clamav & re-ran freshclam only to have
>> the same issue occur on the next inbound email?
>>
>
> top - 11:07:58 up 3 days,  3:49,  2 users,  load average: 2.96, 4.30, 2.19
>>
>
> note that some time after start, clamd loads, virus signatures from disk
> unpacks them and builds in-memory databse, so it is expected to eat 100% of
> CPU for a few minutes.
>
> logs spew out repeats of the below continuously?
>>
>> Tue Mar 28 11:20:19 2017 -> +++ Started at Tue Mar 28 11:20:19 2017
>> Tue Mar 28 11:20:19 2017 -> Received 1 file descriptor(s) from systemd.
>>
>
> Tue Mar 28 11:20:27 2017 -> +++ Started at Tue Mar 28 11:20:27 2017
>> Tue Mar 28 11:20:27 2017 -> Received 1 file descriptor(s) from systemd.
>>
>
> Tue Mar 28 11:20:33 2017 -> +++ Started at Tue Mar 28 11:20:33 2017
>> Tue Mar 28 11:20:33 2017 -> Received 1 file descriptor(s) from systemd.
>>
>
> this looks like either the clamav process is crashing, or there is an error
> related to how clamd is started from systemd, so systemd kills it and
> starts
> it repeatedly again  and again...
>
>
> --
> Matus UHLAR - fantomas, uhlar at fantomas.sk ; http://www.fantomas.sk/
> Warning: I wish NOT to receive e-mail advertising to this address.
> Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
> "Two words: Windows survives." - Craig Mundie, Microsoft senior strategist
> "So does syphillis. Good thing we have penicillin." - Matthew Alton
> _______________________________________________
> clamav-users mailing list
> clamav-users at lists.clamav.net
> http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
>
>
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
>
> http://www.clamav.net/contact.html#ml
>