clamav 0.90.2 generates a 100% cpu load when used with postfix for mail scanning. a patch could be found at: http://citrin.ru/stuff/clamav/patch-0.90.1-matcher-ac.c the problem discussion could be found at: http://www.gossamer-threads.com/lists/clamav/devel/30795 and here is the bug from clamav home page: https://wwws.clamav.net/bugzilla/show_bug.cgi?id=434 Reproducible: Always Steps to Reproduce: 1.install app-antivirus/clamav-0.90.2 2. watch the cpu load when a mail is scanned Actual Results: the cpu load is to high comparing with 0.88.7 Expected Results: keep the same cpu usage
same symptoms here.
Please try 0.90.3, fresh in the tree. It should contain some performance tweaks, although upstream still hasn't reasonably commented on their bug 434 (and I don't want to include yet another patch not approved by upstream).
(In reply to comment #2) > Please try 0.90.3, fresh in the tree. It should contain some performance > tweaks, although upstream still hasn't reasonably commented on their bug 434 > (and I don't want to include yet another patch not approved by upstream). > same behavior in 0.90.3
I have the same high-cpu-load problem with app-antivirus/clamav-0.90.3. Just scanning the eicar.com-testvirus (some bytes with a test signature) with clamscan needs about 20 seconds with 99% cpu load. When I scan the same eicar.com-testvirus with clamDscan it is done in milliseconds.
*** Bug 180959 has been marked as a duplicate of this bug. ***
app-antivirus/clamav-0.90.3 generates high cpu load with KMail / sendmail too :-(
If you look at ClamAV bug 434: https://wwws.clamav.net/bugzilla/show_bug.cgi?id=434 it is marked Resolved Fixed because testing was done with clamdscan not clamscan. I switched all of my MainScanner servers to clamdscan and the high CPU usage problem went away. As long as the bug is marked Resolved Fixed at ClamAV the problem with clamscan will not be fixed. The bug would not exist in the first place if clamscan used libclamav in the same way as clamdscan does, which, obviously, it doesn't. I am using clamav 0.90.3 [root@jrushworth virus]# clamdscan -v /tmp/test_files /tmp/test_files/eicar.com: Eicar-Test-Signature FOUND /tmp/test_files/LIFE_STAGES.SHS: VBS.SSIWG FOUND ----------- SCAN SUMMARY ----------- Infected files: 2 Time: 0.031 sec (0 m 0 s) [root@jrushworth virus]# clamscan -v /tmp/test_files Scanning /tmp/test_files/eicar.com /tmp/test_files/eicar.com: Eicar-Test-Signature FOUND Scanning /tmp/test_files/LIFE_STAGES.SHS /tmp/test_files/LIFE_STAGES.SHS: VBS.SSIWG FOUND Scanning /tmp/test_files/xload.gif /tmp/test_files/xload.gif: OK ----------- SCAN SUMMARY ----------- Known viruses: 229708 Engine version: 0.90.3 Scanned directories: 1 Scanned files: 3 Infected files: 2 Data scanned: 0.03 MB Time: 126.735 sec (2 m 6 s)
here it is _not_ solved with clamav-0.90.3.ebuild i still have ~98% cpu load for some minutes. is there a solution? next i will try the old clamav-0.90.1 with the "matcher-patch" (found somewhere).
additional information: the patch is from here: http://citrin.ru/stuff/clamav/patch-0.90.1-matcher-ac.c
i still got the problem wit 0.90.1 nas the patch. ;-( i use x86.
As 0.91 is in the tree and stable for almost all arches, I'm closing this bug. Cheers, everyone.
