At 4:10 PM -0600 11/2/09, Noel Jones wrote:
>On 11/2/2009 1:42 PM, Avinash wrote:
>>Hi everyone,
>>
>>We are using Sanesecurity signatures in clamd for scanning mails. Recently
>>we are seeing some load issues on clamd server due to sanesecurity
>>signatures (load is automatically decreasing when the sanesecurity sigs are
>>removed)
>>
>>Does anyone face this issue before? Sanesecurity sigs are much needed to
>>catch spam, is these anyway that i can fix this issue? Please help me.
>>
>
>Likely just one of the signature files is causing problems. Try
>disabling them one at a time until load comes down to an acceptable
>level. I'd start with winnow.complex.patterns.ldb.
Just a question. Why disable a file that currently has only 2 rules
in it? Wouldn't you want to 1) determine what he has enabled? After
all safebrowsing is humongous, 2) what hardware configuration and
scan volume he is using and 3) what else is running on the machine?
After all there are a lot of us using all sansecurity files and
safebrowsing with no issues which would lead one to believe that
there is not a signature file that is causing problems but more
probably the interaction of light hardware, higher data volume and
other processes running on the server coupled with a large number of
signatures.
Lets first look at what Avinash wrote. He said all was well with
ClamAV and SaneSecurity signatures until recently.
It would be nice to know what changed. If it is that the volume of
email has increased then he needs to look at his entire setup - what
else is running on his machine and what it contributes to the load.
I doubt its a signature file causing problems per se.
Just my 2 cents,
Tom
Tom
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml
(text/plain)