[clamav-users] 0.100.1 issues - allocation memory / pthread create failed

[Jamal Saleh]

So we have this running as an instream active service with a pretty decent volume.  We inherited the application from a previous developer so the detailed technical understanding isn't there, but we've modified the basic parameters like max threads, stream size plus additional logging parameters for debugging and continuous signature updates.  We initially tried to use the Cisco provided build but it would not run as a Windows service.  The build we used is the ClamAV Antivirus Native Win32 Port - 0.100.1 located here - http://oss.netfarm.it/clamav/ but it was until we used 0.100.1 that the logs started to producing the memory allocation errors, then we'd stop processing threads all together.


From: clamav-users <clamav-users-bounces at lists.clamav.net> On Behalf Of Micah Snyder (micasnyd)
Sent: Monday, October 8, 2018 2:36 PM
To: ClamAV users ML <clamav-users at lists.clamav.net>
Subject: Re: [clamav-users] 0.100.1 issues - allocation memory / pthread create failed

If you are using clamd's on-access scanning feature, this may be a result of the issue with the "OnAccessExtraScanning" option that prompted us to disable extra-scanning in 0.100.2 (and the upcoming 0.101) until we have the thread resource issue with extra-scanning resolved.

https://blog.clamav.net/2018/10/clamav-01002-has-been-released.html
https://bugzilla.clamav.net/show_bug.cgi?id=12048#c5


Micah Snyder
ClamAV Development
Talos
Cisco Systems, Inc.


On Oct 8, 2018, at 12:41 PM, G.W. Haywood <clamav at jubileegroup.co.uk<mailto:clamav at jubileegroup.co.uk>> wrote:

Hi there,

On Mon, 8 Oct 2018, Jamal Saleh wrote:


...
Can't allocate memory ERROR
ERROR: pthread_create failed

Looking to get help on the aforementioned errors.  On version 0.99.2
we had no issues but once we went to this version, we''ve processing
outages and only a server restart / unload would resolve the issue.
Any help would be appreciated, but the configs are basically default
aside from the advanced logging values we have set.  The servers are
never taxes nor does the traffic seem to peek when this occurs -
happens at random times but every few days.
...

Your description sounds to me like the sypmtoms of a memory leak.  To
begin with I'd put something like this

* * * * * /bin/date >> /tmp/clamstats.log ; /usr/bin/top -b -n1 | /bin/grep clam >> /tmp/clamstats.log

in the crontab.  It's unclear to me if ClamAV is the problem or not,
and this at least ought to tell you something.

--

73,
Ged.
_______________________________________________
clamav-users mailing list
clamav-users at lists.clamav.net<mailto:clamav-users at lists.clamav.net>
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.clamav.net/pipermail/clamav-users/attachments/20181008/6766aa58/attachment.htm>