MailScanner is 100% CPU during 1 to 2 hours when starting
Julian Field
MailScanner at ecs.soton.ac.uk
Wed Apr 16 21:19:57 IST 2008
1) 1st thing to check: Edit MailScanner.conf and make sure that both
"Debug = no" and "Debug SpamAssassin = no".
2) Then I would strongly advise you upgrade MailScanner as you are
running a version 1 year old. When you do the upgrade,
"upgrade_MailScanner_conf" will do the hard work of updating your
MailScanner.conf file for you. So upgrading is a pretty quick and easy task.
3) And importantly, upgrade your ClamAV to the latest (in which case you
won't be able to use the "clamavmodule" virus scanner in MailScanner),
or else 1 version back which is 0.92.1 which will work with the most
recent version of Mail-ClamAV module so the "clamavmodule" virus scanner
will work. You find your virus scanners by checking the "Virus Scanners
=" setting in MailScanner.conf or run MailScanner --lint and it will
tell you (if your version of MailScanner even *has* the --lint
command-line option!).
If you installed ClamAV and SpamAssassin from my easy-install package
from www.mailscanner.info, then you can get the 0.92.1 version from
http://www.mailscanner.info/files/4/install-Clam-0.92.1-SA-3.2.4.tar.gz
If you aren't trying to use the "clamavmodule" virus scanner, then
upgrade to the latest one at
http://www.mailscanner.info/files/4/install-Clam-0.93-SA-3.2.4.tar.gz
Good luck!
Philippe Thomassigny wrote:
> Hello to the comunity
>
> I have a strange behaviour on my servers (and not only one !)
> MailScanner is installed with clamav, spamassassin in a Ensim Pro X
> environment.
>
> When i start or restart the MailScanner, it starts to take 100% CPU
> for all children processes during 1 to 2 hours
> which is *really* annoying since it literrally blocks all mail
> dispatching during this time.
>
> PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND
> 27363 root 25 0 62208 50m 2476 R 50 2.5 7:24.52
> MailScanner: starting children
> 26948 root 25 0 62208 50m 2476 R 48 2.5 7:30.29
> MailScanner: starting children
> 27050 root 25 0 62208 50m 2476 R 41 2.5 7:28.99
> MailScanner: starting children
> 27647 root 25 0 62216 50m 2476 R 40 2.5 7:25.04
> MailScanner: starting children
> 27206 root 25 0 62208 50m 2476 R 39 2.5 7:29.69
> MailScanner: starting children
> 27471 root 25 0 62076 50m 2476 R 39 2.5 7:15.67
> MailScanner: starting children
> 27552 root 25 0 62208 50m 2476 R 35 2.5 7:27.87
> MailScanner: starting children
> 27292 root 25 0 62208 50m 2476 R 33 2.5 7:24.72
> MailScanner: starting children
> The processes are in "starting children" state during 1 to 2 hours,
> i already tried to put only 1 , 4, 8, 10 processes, it's the same.
> I searched into the MailScanner.conf and found nothing that could help
> (hard disk scanning ar the start or anything similar ?)
>
> And suddenly after about 2 hours, it stops to use CPU and start to
> work normally.
>
> Some info:
>
> [root at ns1 images]# MailScanner -v
> Running on
> Linux ns1.adigital.net.mx <http://ns1.adigital.net.mx>
> 2.6.18-53.1.6.el5 #1 SMP Wed Jan 16 03:56:43 EST 2008 i686 i686 i386
> GNU/Linux
> This is Red Hat Enterprise Linux Server release 5.1 (Tikanga)
> This is Perl version 5.008008 (5.8.8)
> This is MailScanner version 4.58.9
> Module versions are:
> 1.00 AnyDBM_File
> 1.16 Archive::Zip
> 1.04 Carp
> 1.119 Convert::BinHex
> 1.00 DirHandle
> 1.05 Fcntl
> 2.74 File::Basename
> 2.09 File::Copy
> 2.01 FileHandle
> 1.08 File::Path
> 0.16 File::Temp
> 0.90 Filesys::Df
> 1.35 HTML::Entities
> 3.55 HTML::Parser
> 2.37 HTML::TokeParser
> 1.22 IO
> 1.13 IO::File
> 1.13 IO::Pipe
> 1.74 Mail::Header
> 3.07 MIME::Base64
> 5.420 MIME::Decoder
> 5.420 MIME::Decoder::UU
> 5.420 MIME::Head
> 5.420 MIME::Parser
> 3.07 MIME::QuotedPrint
> 5.420 MIME::Tools
> 0.10 Net::CIDR
> 1.09 POSIX
> 1.78 Socket
> 1.4 Sys::Hostname::Long
> 0.13 Sys::Syslog
> 1.86 Time::HiRes
> 1.02 Time::localtime
> Optional module versions are:
> 0.17 Convert::TNEF
> 1.814 DB_File
> 1.13 DBD::SQLite
> 1.52 DBI
> 1.14 Digest
> 1.01 Digest::HMAC
> 2.36 Digest::MD5
> 2.11 Digest::SHA1
> 0.44 Inline
> 0.20 Mail::ClamAV
> 3.001009 Mail::SpamAssassin
> missing Mail::SPF::Query
> missing Net::CIDR::Lite
> 1.25 Net::IP
> 0.59 Net::DNS
> missing Net::LDAP
> missing Parse::RecDescent
> missing SAVI
> 2.56 Test::Harness
> 0.62 Test::Simple
> 1.95 Text::Balanced
> 1.35 URI
> [root at ns1 images]#
> I tried to get files openned by a MailScanner: starting childron
> process but found nothing really weirdo
>
> [root at ns1 images]# lsof -p 27050
> COMMAND PID USER FD TYPE DEVICE SIZE NODE NAME
> MailScann 27050 root cwd DIR 3,3 90112 4423741
> /home/virtual/FILESYSTEMTEMPLATE/services/sendmail/mqueue
> MailScann 27050 root rtd DIR 3,3 4096 2 /
> MailScann 27050 root txt REG 3,3 14784 22320193
> /usr/bin/perl
> MailScann 27050 root mem REG 3,3 1241272 22413572
> /usr/lib/perl5/5.8.8/i386-linux-thread-multi/CORE/libperl.so
> MailScann 27050 root mem REG 3,3 9804 23134448
> /usr/lib/perl5/site_perl/5.8.8/i386-linux-thread-multi/auto/Filesys/Df/Df.so
> MailScann 27050 root mem REG 3,3 5956 22446361
> /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/Sys/Hostname/Hostname.so
> MailScann 27050 root mem REG 3,3 18224 22446147
> /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/File/Glob/Glob.so
> MailScann 27050 root mem REG 3,3 13932 22446365
> /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/Sys/Syslog/Syslog.so
> MailScann 27050 root mem REG 3,3 8808 22446102
> /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/Cwd/Cwd.so
> MailScann 27050 root mem REG 3,3 13944 22446117
> /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/Digest/MD5/MD5.so
> MailScann 27050 root mem REG 3,3 157304 22320449
> /usr/lib/libk5crypto.so.3.1
> MailScann 27050 root mem REG 3,3 46680 29425704
> /lib/libnss_files-2.5.so <http://libnss_files-2.5.so>
> MailScann 27050 root mem REG 3,3 248028 22331724
> /usr/lib/libcurl.so.3.0.0
> MailScann 27050 root mem REG 3,3 18976 22446367
> /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/Time/HiRes/HiRes.so
> MailScann 27050 root mem REG 3,3 10900 22446168
> /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/MIME/Base64/Base64.so
> MailScann 27050 root mem REG 3,3 187704 22324060
> /usr/lib/libgssapi_krb5.so.2.2
> MailScann 27050 root mem REG 3,3 881927 22331722
> /usr/lib/sse2/libgmp.so.3.3.3
> MailScann 27050 root mem REG 3,3 281180 29427206
> /lib/libssl.so.0.9.8b
> MailScann 27050 root mem REG 3,3 601044 22320472
> /usr/lib/libkrb5.so.3.3
> MailScann 27050 root mem REG 3,3 64076 22479037
> /usr/lib/perl5/vendor_perl/5.8.8/i386-linux-thread-multi/auto/Compress/Zlib/Zlib.so
> MailScann 27050 root mem REG 3,3 198840 22331723
> /usr/lib/libidn.so.11.5.19
> MailScann 27050 root mem REG 3,3 234380 29427222
> /lib/libssl.so.0.9.7a
> MailScann 27050 root mem REG 3,3 11716 22446145
> /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/Fcntl/Fcntl.so
> MailScann 27050 root mem REG 3,3 85344 23103199
> /usr/lib/perl5/site_perl/5.8.8/i386-linux-thread-multi/auto/Mail/ClamAV/ClamAV.so
> MailScann 27050 root mem REG 3,3 67788 22328291
> /usr/lib/libbz2.so.1.0.3
> MailScann 27050 root mem REG 3,3 20216 22446335
> /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/Socket/Socket.so
> MailScann 27050 root mem REG 3,3 489020 22325711
> /usr/lib/libclamav.so.2.0.1
> MailScann 27050 root mem REG 3,3 115040 22446173
> /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/POSIX/POSIX.so
> MailScann 27050 root mem REG 3,3 1011024 29427216
> /lib/libdb-4.3.so <http://libdb-4.3.so>
> MailScann 27050 root mem REG 3,3 53756 22446104
> /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/DB_File/DB_File.so
> MailScann 27050 root mem REG 3,3 15164 29425721
> /lib/libutil-2.5.so <http://libutil-2.5.so>
> MailScann 27050 root mem REG 3,3 16036 22446160
> /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/IO/IO.so
> MailScann 27050 root mem REG 3,3 43240 22479943
> /usr/lib/perl5/vendor_perl/5.8.8/i386-linux-thread-multi/auto/HTML/Parser/Parser.so
> MailScann 27050 root mem REG 3,3 125736 29425666
> /lib/ld-2.5.so <http://ld-2.5.so>
> MailScann 27050 root mem REG 3,3 1589908 29425682
> /lib/libc-2.5.so <http://libc-2.5.so>
> MailScann 27050 root mem REG 3,3 16428 29425689
> /lib/libdl-2.5.so <http://libdl-2.5.so>
> MailScann 27050 root mem REG 3,3 208352 29425705
> /lib/libm-2.5.so <http://libm-2.5.so>
> MailScann 27050 root mem REG 3,3 125644 29425697
> /lib/libpthread-2.5.so <http://libpthread-2.5.so>
> MailScann 27050 root mem REG 3,3 75284 22319473
> /usr/lib/libz.so.1.2.3
> MailScann 27050 root mem REG 3,3 242880 29425865
> /lib/libsepol.so.1
> MailScann 27050 root mem REG 3,3 93512 29425867
> /lib/libselinux.so.1
> MailScann 27050 root mem REG 3,3 101404 29425713
> /lib/libnsl-2.5.so <http://libnsl-2.5.so>
> MailScann 27050 root mem REG 3,3 27736 29425717
> /lib/libcrypt-2.5.so <http://libcrypt-2.5.so>
> MailScann 27050 root mem REG 3,3 76400 29425715
> /lib/libresolv-2.5.so <http://libresolv-2.5.so>
> MailScann 27050 root mem REG 3,3 7748 29425878
> /lib/libcom_err.so.2.1
> MailScann 27050 root mem REG 3,3 8072 29425856
> /lib/libkeyutils-1.2.so <http://libkeyutils-1.2.so>
> MailScann 27050 root mem REG 3,3 36168 22446165
> /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/List/Util/Util.so
> MailScann 27050 root mem REG 3,3 116948 22479915
> /usr/lib/perl5/vendor_perl/5.8.8/i386-linux-thread-multi/auto/DBI/DBI.so
> MailScann 27050 root mem REG 3,3 33648 22320202
> /usr/lib/libkrb5support.so.0.1
> MailScann 27050 root mem REG 3,3 25112 29427192
> /lib/libnss_ensimvwh.so.2
> MailScann 27050 root mem REG 3,3 1241936 29425880
> /lib/libcrypto.so.0.9.8b
> MailScann 27050 root mem REG 3,3 1157072 29427153
> /lib/libcrypto.so.0.9.7a
> MailScann 27050 root mem REG 3,3 56413584 22330259
> /usr/lib/locale/locale-archive
> MailScann 27050 root 0r CHR 1,3 1223 /dev/null
> MailScann 27050 root 1w CHR 1,3 1223 /dev/null
> MailScann 27050 root 2w CHR 1,3 1223 /dev/null
> MailScann 27050 root 3u unix 0xf35fbb80 184178683 socket
> MailScann 27050 root 4r REG 3,3 56745 23363698
> /usr/lib/MailScanner/MailScanner/CustomConfig.pm
> MailScann 27050 root 5r REG 3,3 19933 23363697
> /usr/lib/MailScanner/MailScanner/ConfigDefs.pl
> MailScann 27050 root 6r REG 3,3 2727 23363699
> /usr/lib/MailScanner/MailScanner/CustomFunctions/GenericSpamScanner.pm
> MailScann 27050 root 7uR REG 3,3 0 23003257
> /var/lib/clamav/.dbLock
> MailScann 27050 root 8r DIR 3,3 4096 23003255
> /var/lib/clamav
> MailScann 27050 root 9uR REG 3,3 0 23040417
> /var/lib/clamav/main.inc/.dbLock
> MailScann 27050 root 10r DIR 3,3 4096 23040410
> /var/lib/clamav/main.inc
> MailScann 27050 root 11r REG 3,3 7864180 23040420
> /var/lib/clamav/main.inc/main.mdb
> [root at ns1 images]#
>
>
>
>
> Thanks if you can help
>
> M
>
>
>
>
>
Jules
--
Julian Field MEng CITP CEng
www.MailScanner.info
Buy the MailScanner book at www.MailScanner.info/store
MailScanner customisation, or any advanced system administration help?
Contact me at Jules at Jules.FM
PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
PGP public key: http://www.jules.fm/julesfm.asc
--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.
More information about the MailScanner
mailing list