[clamav-users] Why Is clamd consuming so much CPU?

[Michael Newman]

Here’s what top has looked like for the past few hours:

=====
Processes: 488 total, 3 running, 1 stuck, 484 sleeping, 2463 threads 16:14:48
Load Avg: 3.65, 3.64, 3.75 CPU usage: 33.13% user, 6.69% sys, 60.17% idle
MemRegions: 222633 total, 4168M resident, 0B private, 2111M shared.
PhysMem: 14G used (3589M wired), 1716M unused.
VM: 4307G vsize, 0B framework vsize, 204869208(128) swapins, 211094891(0) swapou
Networks: packets: 112681321/63G in, 131201836/104G out.
Disks: 529021911/15T read, 111038699/3979G written.

PID COMMAND %CPU TIME #TH #WQ #PORTS MEM PURG CMPRS PGRP
33327 clamd 99.0 00:04.88 1/1 0 13 328M+ 0B 0B 33327
=====

I have not initiated any scans since this morning. It is now just after 4:00 PM.

The clamd log file has over 3000 entries pretty much exactly like this:

=====
+++ Started at Wed Aug 22 16:12:35 2018
Received 0 file descriptor(s) from systemd.
clamd daemon 0.100.1 (OS: darwin17.6.0, ARCH: x86_64, CPU: x86_64)
Log file size limited to 2097152 bytes.
Reading databases from /opt/local/share/clamav
Not loading PUA signatures.
Bytecode: Security mode set to "TrustSigned".
Loaded 6616683 signatures.
ERROR: LOCAL: Socket file /var/tmp/clamd.socket is in use by another process.
=====

Here’s the time that the first few ran:

=====
/private/var/log/clamd.log:1: +++ Started at Tue Aug 21 13:29:42 2018
/private/var/log/clamd.log:10: +++ Started at Tue Aug 21 13:29:54 2018
/private/var/log/clamd.log:19: +++ Started at Tue Aug 21 13:30:04 2018
/private/var/log/clamd.log:28: +++ Started at Tue Aug 21 13:30:14 2018
/private/var/log/clamd.log:37: +++ Started at Tue Aug 21 13:30:25 2018
/private/var/log/clamd.log:46: +++ Started at Tue Aug 21 13:30:35 2018
/private/var/log/clamd.log:55: +++ Started at Tue Aug 21 13:30:45 2018
/private/var/log/clamd.log:64: +++ Started at Tue Aug 21 13:30:56 2018
=====

What have I done? And why did this suddenly start at 13:29:42 today?

_______________________________________________
clamav-users mailing list
clamav-***@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

h