[clamav-users] Disk space utilization ever increasing until I kill clamonacc

[Stephen Scotter]

Hi Ged

> On Monday, 21 February 2022, 23:45:25 GMT, G.W. Haywood via clamav-users <clamav-users at lists.clamav.net> wrote: 
> 
> Hi there,
> 
> On Mon, 21 Feb 2022, Stephen Scotter via clamav-users wrote:
> 
> > ... when deploying new virtual machines which are built to use
> > ClamAV’s on access features disk space is “consumed” over a period
> > of many days until it eventually consumes all disk space and the
> > server becomes non responsive (for obvious reasons).
> > ...
> > Until a few days ago I didn't know which piece of software was
> > causing the issue. It felt like something was keeping a filelock
> > open type issue.
> > ...
> > All in all there's were 1025 references to socket "files" in
> > /proc/715/fd/, all timestamped about 25 minutes ago.

> You don't say what version ov ClamAV you're using.  There was a fix
> recently for an issue which sounds like what you're seeing:

>  https://blog.clamav.net/2021/

School boy error on my part not providing the version information. My bad!

# clamd -V
ClamAV 0.103.3/26461/Tue Feb 22 09:28:23 2022

I think you're on to something with thinking this is a bug which may have already been resolved.

https://blog.clamav.net/2021/11/clamav-01034-and-01041-patch-releases.html
 ---------------------------
Other fixes backported from 0.104.0:
ClamOnAcc: Fixed a socket file descriptor leak that could result in a crash when all available file descriptors are exhausted.
---------------------------

< Debian specific >
I check the test host in question and it didn't have the bullseye-updates repo enabled.

Added the following to /etc/apt/sources.list, then did a apt-get update && apt-get upgrade and now I'm on 0.103.5

---------------------------
deb http://ftp.uk.debian.org/debian bullseye-updates main
deb-src http://ftp.uk.debian.org/debian bullseye-updates main
---------------------------

---------------------------
# clamd -V
ClamAV 0.103.5/26461/Tue Feb 22 09:28:23 2022
---------------------------

< / Debian specific > 

Fingers crossed it resolve the issue. I'll do my best to feed back in a few days.

Thanks for you assistance.

Steve

> -- 

> 73,
> Ged.


_______________________________________________

clamav-users mailing list
clamav-users at lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml