clamd crashing

Report bugs and workarounds
Post Reply
The_Penguin
Posts: 9
Joined: 15 Mar 2015 16:34

clamd crashing

Post by The_Penguin »

Hi all. I have read a number of threads on clamd crashing, and I think my problem may be different.

I have been running EFA for about 3 months and it's been pretty good. Recently clamd started crashing. /var was a bit full, so I increased it, also increased RAM to 4GB and reduced MailScanner children.
Just upgraded to 3.0.0.7 and the problem persists.
System is running under Hyper-V Server 2012R2 on an Intel i7. The EFA VM has 4GB of RAM, 4 virtual CPUs,and 64GB of disk.
With clamd running and 4 instances of MailScanner running I have 962MB free

Code: Select all

[root@mcsspam etc]# free -m
             total       used       free     shared    buffers     cached
Mem:          3823       2861        962          0        121       1809
-/+ buffers/cache:        929       2893
Swap:            0          0          0
The error I see in syslog is a protection fault:

Code: Select all

Mar 15 09:46:21 mcsspam kernel: clamd[65470] general protection ip:348e6b2e45 sp:7fffaefccbe8 error:0 in libclamav.so.6.1.23[348e600000+178000]
Seems to be happening every 3 hours or so.
The only thing lacking on the physical host is disk speed, scheduled to change to a decent Adaptec RAID controller next week.

Anything I should be looking for?

Thanks in advance.
The_Penguin
Posts: 9
Joined: 15 Mar 2015 16:34

Re: clamd crashing

Post by The_Penguin »

Update. Put more physical RAM in the Hyper-V server and bumped up the VM RAM to 6GB.
Also dropped the VCPus down to 2 (4 was overkill for my tiny workload) and now it seems stable.
The_Penguin
Posts: 9
Joined: 15 Mar 2015 16:34

Re: clamd crashing

Post by The_Penguin »

Update 2, spoke too soon, had a few more crashes. Some protection faults, and some failures during self-check reload db failed: Malformed database
Did my RAID upgrade last night, Adaptec 6805 and my disk performance is significantly better. So maybe that was the issue, has been fine for 24 hours now. Fingers crossed.
User avatar
shawniverson
Posts: 3644
Joined: 13 Jan 2014 23:30
Location: Indianapolis, Indiana USA
Contact:

Re: clamd crashing

Post by shawniverson »

Cool, keep us posted :D
ressel
Posts: 27
Joined: 28 Nov 2014 11:59

Re: clamd crashing

Post by ressel »

My clamd is also crashing sometimes, and then EFA builds a big mail queue.
Until now my best fix, have been to reboot EFA server.
And then it will run again for some weeks.
User avatar
darky83
Site Admin
Posts: 540
Joined: 30 Sep 2012 11:03
Location: eFa
Contact:

Re: clamd crashing

Post by darky83 »

Most crashes i have had in my tests were due to the lack of memory.

Note that multiple factors determine the need for memory so your individual use case might need you to increase the memory.

One big thing to remember is that we don't run any swap partition in the system, so if you run out of memory the system will crash.

If you experience crashes try increasing the memory, depending on your workload and settings (mailscanner children is a huge factor here) you might even need to increase it way above the default 2 or 4 GB.

(I run a system with 64GB just for processing...)

If you don't have that much memory available you might try adding a disk to the VM and configure it as swap..
Just let me know if you need an howto, then i update the wiki with a small tutorial.
Version eFa 4.x now available!
Post Reply