[clamav-users] Disk space utilization ever increasing until I kill clamonacc

Stephen Scotter sscotter at yahoo.com
Thu Mar 17 11:07:22 UTC 2022


I just wanted to close the loop on this for anyone else who follows in my footsteps.

Since upgrading to 0.103.5 I've not had any more problems with disk utilization seemingly increasing.

Thanks for your assistance.

Regards

Steve


On Tuesday, 22 February 2022, 11:57:46 GMT, Stephen Scotter <sscotter at yahoo.com> wrote: 





Hi Ged

> On Monday, 21 February 2022, 23:45:25 GMT, G.W. Haywood via clamav-users <clamav-users at lists.clamav.net> wrote: 
> 
> Hi there,
> 
> On Mon, 21 Feb 2022, Stephen Scotter via clamav-users wrote:
> 
> > ... when deploying new virtual machines which are built to use
> > ClamAV’s on access features disk space is “consumed” over a period
> > of many days until it eventually consumes all disk space and the
> > server becomes non responsive (for obvious reasons).
> > ...
> > Until a few days ago I didn't know which piece of software was
> > causing the issue. It felt like something was keeping a filelock
> > open type issue.
> > ...
> > All in all there's were 1025 references to socket "files" in
> > /proc/715/fd/, all timestamped about 25 minutes ago.

> You don't say what version ov ClamAV you're using.  There was a fix
> recently for an issue which sounds like what you're seeing:

>  https://blog.clamav.net/2021/

School boy error on my part not providing the version information. My bad!

# clamd -V
ClamAV 0.103.3/26461/Tue Feb 22 09:28:23 2022

I think you're on to something with thinking this is a bug which may have already been resolved.

https://blog.clamav.net/2021/11/clamav-01034-and-01041-patch-releases.html
---------------------------
Other fixes backported from 0.104.0:
ClamOnAcc: Fixed a socket file descriptor leak that could result in a crash when all available file descriptors are exhausted.
---------------------------

< Debian specific >
I check the test host in question and it didn't have the bullseye-updates repo enabled.

Added the following to /etc/apt/sources.list, then did a apt-get update && apt-get upgrade and now I'm on 0.103.5

---------------------------
deb http://ftp.uk.debian.org/debian bullseye-updates main
deb-src http://ftp.uk.debian.org/debian bullseye-updates main
---------------------------

---------------------------
# clamd -V
ClamAV 0.103.5/26461/Tue Feb 22 09:28:23 2022
---------------------------

< / Debian specific > 

Fingers crossed it resolve the issue. I'll do my best to feed back in a few days.

Thanks for you assistance.

Steve


> -- 

> 73,
> Ged.


_______________________________________________

clamav-users mailing list
clamav-users at lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


More information about the clamav-users mailing list