| 1 |
Today my gentoo server that has sat happily churning my mundane (and |
| 2 |
lightweight) tasks froze and I noticed when it stopped serving DNS |
| 3 |
queries... and the server was even unresponsive from the command |
| 4 |
prompt. I rebooted.... and was a bit taken aback at what I found. |
| 5 |
|
| 6 |
The server currently runs, but has a load of over 60, where I'd expect a |
| 7 |
load of below 0.1. Investigations using top did not suggest that a |
| 8 |
single process was using vast amounts of processing time... but there |
| 9 |
were significantly more clamascan processes than I'd expect... and even |
| 10 |
more procmail processes.... |
| 11 |
|
| 12 |
-- |
| 13 |
$ ps auwx | grep clamscan | grep -v grep | wc -l |
| 14 |
42 |
| 15 |
$ ps auwx | grep procmail | grep -v grep | wc -l |
| 16 |
94 |
| 17 |
$ ps auwx | grep clamassassin | grep -v grep | wc -l |
| 18 |
55 |
| 19 |
-- |
| 20 |
|
| 21 |
The first few lines from top say: |
| 22 |
|
| 23 |
-- |
| 24 |
PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND |
| 25 |
15451 usr 20 0 35944 33m 872 D 2.7 3.3 0:00.60 clamscan |
| 26 |
216 root 15 -5 0 0 0 S 0.7 0.0 0:03.80 kswapd0 |
| 27 |
15116 usr 20 0 76136 15m 668 D 0.7 1.6 0:03.30 clamscan |
| 28 |
15299 usr 20 0 2584 1224 840 R 0.7 0.1 0:04.36 top |
| 29 |
15428 usr 20 0 61288 57m 872 D 0.7 5.7 0:01.38 clamscan |
| 30 |
1 root 20 0 1648 196 172 S 0.0 0.0 0:00.64 init |
| 31 |
2 root 15 -5 0 0 0 S 0.0 0.0 0:00.00 kthreadd |
| 32 |
-- |
| 33 |
|
| 34 |
The procmail configuration I've adopted hasn't changed in years... |
| 35 |
-- |
| 36 |
DEFAULT=$HOME/.maildir/ |
| 37 |
SHELL=/bin/sh |
| 38 |
MAILDIR=$HOME/.maildir |
| 39 |
|
| 40 |
:0fw |
| 41 |
* < 1024000 |
| 42 |
| /usr/bin/clamassassin | /usr/bin/spamc -f |
| 43 |
-- |
| 44 |
|
| 45 |
I'm assuming that my suddenly starting to have problems with this is |
| 46 |
something to do with an update to clamd/clamassassin... I've a vague |
| 47 |
recollection that one or the other of them might have been updated when |
| 48 |
I last synchronised and emerged updates... but I can't remember. |
| 49 |
|
| 50 |
Any ideas? This isn't a heavily loaded server usually - I've more |
| 51 |
procmail processes than I usually receive in emails in an hour. |
| 52 |
Something's wrong - can anyone offer any hints? Has anyone else run |
| 53 |
into this problem? Is there a known 'quick fix'? |
Archives