The 3 filesizes below are as follows:

70K

260M

80K

This is just one example of the many times the clamd process seems to pause or hang.

Thu Mar 4 09:54:03 2021 -> /imports/INPRDSS122/mnt1/Boot/et-EE/bootmgr.exe.mui: OK

Thu Mar 4 09:54:03 2021 -> Closed fd 44

Thu Mar 4 09:54:03 2021 -> Finished scanthread

Thu Mar 4 09:54:03 2021 -> THRMGR: group_finished: 0x561583a417b0, 10

Thu Mar 4 09:54:03 2021 -> THRMGR: active jobs for 0x561583a417b0: 9

Thu Mar 4 09:54:03 2021 -> THRMGR: queue (single) crossed low threshold -> signaling

Thu Mar 4 09:54:03 2021 -> THRMGR: queue (bulk) crossed low threshold -> signaling

Thu Mar 4 09:54:03 2021 -> THRMGR: contended, woken

Thu Mar 4 09:54:03 2021 -> Consumed entire command

Thu Mar 4 09:54:03 2021 -> got command IDSESSION (10, 13), argument:

Thu Mar 4 09:54:03 2021 -> THRMGR: new group: 0x5615837aa6e0

Thu Mar 4 09:54:03 2021 -> got command FILDES (7, 11), argument:

Thu Mar 4 09:54:03 2021 -> RECVTH: FILDES command complete

Thu Mar 4 09:54:03 2021 -> THRMGR: active jobs for 0x5615837aa6e0: 2

Thu Mar 4 09:54:03 2021 -> THRMGR: contended, sleeping

Thu Mar 4 09:55:04 2021 -> /imports/INPRDSUPDS121_1/mnt2/UPDs/UVHD-S-1-5-21-3556941465-1377616134-1990869325-122888.vhdx: OK

Thu Mar 4 09:55:04 2021 -> Closed fd 178

Thu Mar 4 09:55:04 2021 -> Finished scanthread

Thu Mar 4 09:55:04 2021 -> THRMGR: group_finished: 0x5615837bee00, 17

Thu Mar 4 09:55:04 2021 -> THRMGR: active jobs for 0x5615837bee00: 16

Thu Mar 4 09:55:04 2021 -> THRMGR: queue (single) crossed low threshold -> signaling

Thu Mar 4 09:55:04 2021 -> THRMGR: queue (bulk) crossed low threshold -> signaling

Thu Mar 4 09:55:04 2021 -> THRMGR: contended, woken

Thu Mar 4 09:55:04 2021 -> Consumed entire command

Thu Mar 4 09:55:04 2021 -> got command IDSESSION (10, 13), argument:

Thu Mar 4 09:55:04 2021 -> THRMGR: new group: 0x5615837aa760

Thu Mar 4 09:55:04 2021 -> got command FILDES (7, 11), argument:

Thu Mar 4 09:55:04 2021 -> RECVTH: FILDES command complete

Thu Mar 4 09:55:04 2021 -> THRMGR: active jobs for 0x5615837aa760: 2

Thu Mar 4 09:55:04 2021 -> THRMGR: contended, sleeping

Thu Mar 4 09:55:04 2021 -> /imports/INPMBXFERS121/mnt1/Boot/de-DE/bootmgr.exe.mui: OK

Thu Mar 4 09:55:04 2021 -> Closed fd 46

Thu Mar 4 09:55:04 2021 -> Finished scanthread

Thu Mar 4 09:55:04 2021 -> THRMGR: group_finished: 0x5615837b87f0, 10

Thu Mar 4 09:55:04 2021 -> THRMGR: active jobs for 0x5615837b87f0: 9

Thu Mar 4 09:55:04 2021 -> THRMGR: queue (single) crossed low threshold -> signaling

Thu Mar 4 09:55:04 2021 -> THRMGR: queue (bulk) crossed low threshold -> signaling

Thu Mar 4 09:55:04 2021 -> THRMGR: contended, woken

Thu Mar 4 09:55:04 2021 -> Consumed entire command

Thu Mar 4 09:55:04 2021 -> got command IDSESSION (10, 13), argument:

Thu Mar 4 09:55:04 2021 -> THRMGR: new group: 0x5615837aa7e0

On Wed, Mar 3, 2021 at 4:30 AM G.W. Haywood via clamav-users <clamav-users@lists.clamav.net> wrote:

Hi there,

On Tue, 2 Mar 2021, Michael Kyriacou via clamav-users wrote:

> I am scanning large Data sets for a company. These file systems have
> hundreds of thousands of files in them. Most files are small in size, <1GB,
> while a few are large, >10GB. Most files are documents, archives, and
> executables. I am scanning them to detect if there are any malware.
>
> These are virtual machines, running Ubuntu 20.04.
> The cpu on the esxi host is an Intel Xeon Platinum 828 CPu @2.70GHz. I have
> in total, 112 logical processors available, and 512 GB of RAM.
>
> The message it says is the following:
> ————————————————
> Got command FILDES(7,11) argument
> RECVTH FILDES command complete
> THMGR active jobs for ***********: 2
> THRMGR: Contended, sleeping
> ————————————————

Please _cut_and_paste_ the exact messages that you are seeing, not some approximation to it.
It might also help if you can get your logging system(s) to prepend timestamps. It's usual
to see (and I'm much more comfortable with) logs which look something like this:

Wed Mar 3 09:13:45 2021 -> Got new connection, FD 10
Wed Mar 3 09:13:45 2021 -> Received POLLIN|POLLHUP on fd 6
Wed Mar 3 09:13:45 2021 -> fds_poll_recv: timeout after 30 seconds
Wed Mar 3 09:13:45 2021 -> Received POLLIN|POLLHUP on fd 10
Wed Mar 3 09:13:45 2021 -> got command ALLMATCHINSTREAM (17, 24), argument:
Wed Mar 3 09:13:45 2021 -> Receive thread: INSTREAM: /EXPORTS/clamav/tmp/tcp3/clamav-dc107bae2242d939f16bcf2bf9dd409c.tmp fd 11
Wed Mar 3 09:13:45 2021 -> Breaking command loop, mode is no longer MODE_COMMAND
Wed Mar 3 09:13:45 2021 -> Moved partial command: 4086
Wed Mar 3 09:13:45 2021 -> mode == MODE_STREAM
Wed Mar 3 09:13:45 2021 -> Got chunksize: 8314
Wed Mar 3 09:13:45 2021 -> Quota Remaining: 52420486
Wed Mar 3 09:13:45 2021 -> Processed 4082 bytes of chunkdata, pos 4
Wed Mar 3 09:13:45 2021 -> fds_poll_recv: timeout after 120 seconds
Wed Mar 3 09:13:45 2021 -> Received POLLIN|POLLHUP on fd 10
Wed Mar 3 09:13:45 2021 -> Moved partial command: 4104
Wed Mar 3 09:13:45 2021 -> mode == MODE_STREAM
Wed Mar 3 09:13:45 2021 -> Processed 4104 bytes of chunkdata, pos 0
Wed Mar 3 09:13:45 2021 -> fds_poll_recv: timeout after 120 seconds
Wed Mar 3 09:13:45 2021 -> Received POLLIN|POLLHUP on fd 10
Wed Mar 3 09:13:45 2021 -> Moved partial command: 133
Wed Mar 3 09:13:46 2021 -> mode == MODE_STREAM
Wed Mar 3 09:13:46 2021 -> Processed 128 bytes of chunkdata, pos 0
Wed Mar 3 09:13:46 2021 -> Got chunksize: 0
Wed Mar 3 09:13:46 2021 -> Chunks complete
Wed Mar 3 09:13:46 2021 -> Number of file descriptors polled: 1 fds
Wed Mar 3 09:13:46 2021 -> fds_poll_recv: timeout after 9996 seconds
Wed Mar 3 09:13:46 2021 -> THRMGR: queue (single) crossed low threshold -> signaling
Wed Mar 3 09:13:46 2021 -> THRMGR: queue (bulk) crossed low threshold -> signaling
Wed Mar 3 09:13:46 2021 -> instream(192.168.44.25@45066): OK
Wed Mar 3 09:13:46 2021 -> Finished scanthread
Wed Mar 3 09:13:46 2021 -> Scanthread: connection shut down (FD 10)
Wed Mar 3 09:13:46 2021 -> THRMGR: queue (single) crossed low threshold -> signaling
Wed Mar 3 09:13:46 2021 -> THRMGR: queue (bulk) crossed low threshold -> signaling

--

73,
Ged.

_______________________________________________

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users

Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml