1 Topic by RafaelMass

  • RafaelMass
  • Member
  • Offline
  • Registered: 2011-11-12
  • Posts: 30

Topic: clamd using 100% cpu full time

==== REQUIRED BASIC INFO OF YOUR IREDMAIL SERVER ====
- iRedMail version (check /etc/iredmail-release): 0.9.9
- Deployed with the downloadable installer.
- Linux/BSD distribution name and version: CentOS 7 Clean install
- Store mail accounts in which backend (LDAP/MySQL/PGSQL): MariaDB
- Web server (Apache or Nginx): Nginx
- Manage mail accounts with iRedAdmin-Pro? NO
- [IMPORTANT] Related original log or error message is required if you're experiencing an issue.
====

Clamd process are using ~100% of CPU full time, it's a test server, with 2 account (postmaster and a test user)
I tried reboot server but didn't solve.
Message and maillog atached

logwatch mail:

 ################### Logwatch 7.4.0 (03/01/11) #################### 
        Processing Initiated: Tue Nov 12 09:21:33 2019
        Date Range Processed: yesterday
                              ( 2019-Nov-11 )
                              Period is day.
        Detail Level of Output: 0
        Type of Output/Format: mail / text
        Logfiles for Host: www.t.net
 ################################################################## 
 
 --------------------- Amavisd-new Begin ------------------------ 

 **Unmatched Entries**
        1   No ext program for   .lrz, tried: lrzip -q -k -d -o -, lrzcat -q -k
 
 ---------------------- Amavisd-new End ------------------------- 

 
 --------------------- Clamav Begin ------------------------ 

 
 **Unmatched Entries**
 WARNING: Ignoring deprecated option AllowSupplementaryGroups at /etc/clamd.d/amavisd.conf:21
 LibClamAV Warning: **************************************************
 LibClamAV Warning: ***  The virus database is older than 7 days!  ***
 LibClamAV Warning: ***   Please update it as soon as possible.    ***
 LibClamAV Warning: **************************************************
 WARNING: Ignoring deprecated option AllowSupplementaryGroups at /etc/clamd.d/amavisd.conf:21
 LibClamAV Warning: **************************************************
 LibClamAV Warning: ***  The virus database is older than 7 days!  ***
 LibClamAV Warning: ***   Please update it as soon as possible.    ***
 LibClamAV Warning: **************************************************
 WARNING: Ignoring deprecated option AllowSupplementaryGroups at /etc/clamd.d/amavisd.conf:21
 LibClamAV Warning: **************************************************
 LibClamAV Warning: ***  The virus database is older than 7 days!  ***
 LibClamAV Warning: ***   Please update it as soon as possible.    ***
 LibClamAV Warning: **************************************************
 WARNING: Ignoring deprecated option AllowSupplementaryGroups at /etc/clamd.d/amavisd.conf:21
 LibClamAV Warning: **************************************************
 LibClamAV Warning: ***  The virus database is older than 7 days!  ***
 LibClamAV Warning: ***   Please update it as soon as possible.    ***
 LibClamAV Warning: **************************************************
 WARNING: Ignoring deprecated option AllowSupplementaryGroups at /etc/clamd.d/amavisd.conf:21
 LibClamAV Warning: **************************************************
 LibClamAV Warning: ***  The virus database is older than 7 days!  ***
 LibClamAV Warning: ***   Please update it as soon as possible.    ***
 LibClamAV Warning: **************************************************
 WARNING: Ignoring deprecated option AllowSupplementaryGroups at /etc/clamd.d/amavisd.conf:21
 LibClamAV Warning: **************************************************
 LibClamAV Warning: ***  The virus database is older than 7 days!  ***
 LibClamAV Warning: ***   Please update it as soon as possible.    ***
 LibClamAV Warning: **************************************************
 WARNING: Ignoring deprecated option AllowSupplementaryGroups at /etc/clamd.d/amavisd.conf:21
 LibClamAV Warning: **************************************************
 LibClamAV Warning: ***  The virus database is older than 7 days!  ***
 LibClamAV Warning: ***   Please update it as soon as possible.    ***
 LibClamAV Warning: **************************************************
 WARNING: Ignoring deprecated option AllowSupplementaryGroups at /etc/clamd.d/amavisd.conf:21
 LibClamAV Warning: **************************************************
 LibClamAV Warning: ***  The virus database is older than 7 days!  ***
 LibClamAV Warning: ***   Please update it as soon as possible.    ***
 LibClamAV Warning: **************************************************
 WARNING: Ignoring deprecated option AllowSupplementaryGroups at /etc/clamd.d/amavisd.conf:21
 LibClamAV Warning: **************************************************
 LibClamAV Warning: ***  The virus database is older than 7 days!  ***
 LibClamAV Warning: ***   Please update it as soon as possible.    ***
 LibClamAV Warning: **************************************************
 WARNING: Ignoring deprecated option AllowSupplementaryGroups at /etc/clamd.d/amavisd.conf:21
 LibClamAV Warning: **************************************************
 LibClamAV Warning: ***  The virus database is older than 7 days!  ***
 LibClamAV Warning: ***   Please update it as soon as possible.    ***
 LibClamAV Warning: **************************************************
 WARNING: Ignoring deprecated option AllowSupplementaryGroups at /etc/clamd.d/amavisd.conf:21
 LibClamAV Warning: **************************************************
 LibClamAV Warning: ***  The virus database is older than 7 days!  ***
 LibClamAV Warning: ***   Please update it as soon as possible.    ***
 LibClamAV Warning: **************************************************
 WARNING: Ignoring deprecated option AllowSupplementaryGroups at /etc/clamd.d/amavisd.conf:21
 LibClamAV Warning: **************************************************
 LibClamAV Warning: ***  The virus database is older than 7 days!  ***
 LibClamAV Warning: ***   Please update it as soon as possible.    ***
 LibClamAV Warning: **************************************************
 WARNING: Ignoring deprecated option AllowSupplementaryGroups at /etc/clamd.d/amavisd.conf:21
 LibClamAV Warning: **************************************************
 LibClamAV Warning: ***  The virus database is older than 7 days!  ***
 LibClamAV Warning: ***   Please update it as soon as possible.    ***
 LibClamAV Warning: **************************************************
 
 ---------------------- Clamav End ------------------------- 

 
 --------------------- Cron Begin ------------------------ 

 
 **Unmatched Entries**
 INFO (RANDOM_DELAY will be scaled with factor 71% if used.)
 
 ---------------------- Cron End ------------------------- 

 
 --------------------- ModProbe Begin ------------------------ 

 
 **Unmatched Entries**
 No sensors with loadable kernel modules configured.: 1 Time(s)
 Please, run 'sensors-detect' as root in order to search for available sensors.: 1 Time(s)
 
 ---------------------- ModProbe End ------------------------- 

 
 --------------------- Postfix Begin ------------------------ 

       11   Miscellaneous warnings  
 
        1   Postfix start           
 
 
 
 **Unmatched Entries**
        1   Nov 11 16:56:09 www postfix/qmgr[1953]: 476Mpb6R3jz4x8Y4: status=deferred (bounce failed)
        1   Nov 11 16:56:09 www postfix/qmgr[1953]: 476Kfv4H35z53MQX: from=<netdata@www.transardo.net>, status=expired, returned to sender
        1   Nov 11 16:56:09 www postfix/qmgr[1953]: 476Kfv4H35z53MQX: from=<netdata@www.transardo.net>, size=11855, nrcpt=1 (queue active)
        1   Nov 11 16:56:09 www postfix/qmgr[1953]: 476KbB70jmz53MQT: status=deferred (bounce failed)
        1   Nov 11 16:56:09 www postfix/qmgr[1953]: 476KbB70jmz53MQT: from=<netdata@www.transardo.net>, size=11729, nrcpt=1 (queue active)
        1   Nov 11 16:56:09 www postfix/qmgr[1953]: 476Kfv4H35z53MQX: status=deferred (bounce failed)
        1   Nov 11 16:56:09 www postfix/qmgr[1953]: 476Mpb6R3jz4x8Y4: from=<netdata@www.transardo.net>, size=11857, nrcpt=1 (queue active)
        1   Nov 11 16:56:09 www postfix/qmgr[1953]: 476KbB70jmz53MQT: from=<netdata@www.transardo.net>, status=expired, returned to sender
        1   Nov 11 16:56:09 www postfix/qmgr[1953]: 476Mpb6R3jz4x8Y4: from=<netdata@www.transardo.net>, status=expired, returned to sender
 
 ---------------------- Postfix End ------------------------- 

 
 --------------------- Connections (secure-log) Begin ------------------------ 

 
 Root logins on ttys: 1 Time(s).
 
 **Unmatched Entries**
    polkitd: Acquired the name org.freedesktop.PolicyKit1 on the system bus: 1 Time(s)
    polkitd: Finished loading, compiling and executing 2 rules: 1 Time(s)
    polkitd: Loading rules from directory /etc/polkit-1/rules.d: 1 Time(s)
    polkitd: Loading rules from directory /usr/share/polkit-1/rules.d: 1 Time(s)
 
 ---------------------- Connections (secure-log) End ------------------------- 

 
 --------------------- SSHD Begin ------------------------ 

 
 SSHD Started: 2 Time(s)
 
 ---------------------- SSHD End ------------------------- 

 
 --------------------- yum Begin ------------------------ 

 
 Packages Updated:
    2:perl-Convert-UUlib-1.6-1.el7.x86_64
 
 ---------------------- yum End ------------------------- 

 
 --------------------- Disk Space Begin ------------------------ 

 Filesystem                    Size  Used Avail Use% Mounted on
 devtmpfs                      1.9G     0  1.9G   0% /dev
 /dev/mapper/centos_mail-root   28G  2.2G   26G   8% /
 /dev/sda1                    1014M  192M  823M  19% /boot
 
 
 ---------------------- Disk Space End ------------------------- 

 
 ###################### Logwatch End #########################
Post's attachments

maillog0 20.17 kb, 1 downloads since 2019-11-12 

messages0 23.96 kb, 1 downloads since 2019-11-12 

You don't have the permssions to download the attachments of this post.

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 31,090

Re: clamd using 100% cpu full time

RafaelMass wrote:

Clamd process are using ~100% of CPU full time, it's a test server, with 2 account (postmaster and a test user)

ClamAV was not running, Amavisd calls command "clamscan" directly but this command loads clamav virus signature database everytime can takes a lot system resource.

How much RAM does this server have? At least 4GB memory is required for a low traffic production server.

3 Reply by RafaelMass

  • RafaelMass
  • Member
  • Offline
  • Registered: 2011-11-12
  • Posts: 30

Re: clamd using 100% cpu full time

Server have 6Gb RAM

top command result
top

Post's attachments

01.png
01.png 36.32 kb, file has never been downloaded. 

You don't have the permssions to download the attachments of this post.

4 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 31,090

Re: clamd using 100% cpu full time

Try to reduce concurrently processed messages by following our tutorial:
https://docs.iredmail.org/concurrent.processing.html

5 Reply by RafaelMass

  • RafaelMass
  • Member
  • Offline
  • Registered: 2011-11-12
  • Posts: 30

Re: clamd using 100% cpu full time

I switched to to Ubuntu 18.04. its ok!!
apparently it's something between CentOs and hardware (HPE microserver)