Re: sophie processing not dying
Scott Walker <[email protected]> Wed, 29 Jun 2005 11:41:33 -0700
| Newsgroups | gmane.comp.security.virus.vtools |
|---|---|
| Message-ID | <OF98895143.F48BBD33-ON8825702F.0065A5E5-8825702F.0066AE9F@sophos.com> |
Is anybody else noticing this problem? I just ran a test of my own and I see all the child processes being cleaned up when they have finished. Is it possible that the 35 processes you see are actually currently involved in scanning files? Also, if you don't want a lot of concurrent Sophie processes, then I would recommend setting the maxproc configuration option to something smaller than 100. Scott. [email protected] wrote on 06/29/2005 07:12:47 AM: > Since upgrading to the new Sophie ( 3.04) from 3.04rc? and upgrading from > sweep 3.92 to 3.95, I'm not having trouble with corrupted files but I AM > having trouble with lots of sophie processes hangning around. Before the > change, I'd have 1 or 2 processes. Usually I would have to restart sophie > about every 3 days because it would quit responding. When that happened, it > would genereally have 2 processes running. Now, it is scanning OK, but > there are more and more sophies. Right now, I have 35 of them. Yesterday > afternoon, my server ran out of memory and I had to kill off all the > sophies. > > Here is some sophie info: > mail:/var/qmail/control/users# ps ax |grep sophie | wc -l > 35 > mail:/var/qmail/control/users# sophie -v > NOTICE : Sophie configuration file not specified - falling back to > defaults > NOTICE : Using Sophie configuration file '/etc/sophie.cfg' > NOTICE : Setting configuration options - please wait... > NOTICE : Configuration options set > Sophos engine : Sophos engine version 2.30 > Sophie IDE : Sophos IDE version 3.95 (detects 106591 viruses) > SAVI config : /etc/sophie.savi > Max processes : 100 > Socket path : /var/spool/qmailscan/sophie > Umask : 7 > PID file : /var/run/sophie.pid > Timeout : 300 seconds > Running as user : qscand > Socket group : qmail > Logname : sophie > Log facility : 16 (mail) > Log priority : 5 (notice) > Error strings? : yes > Timestamps? : no > Show virus name? : yes > Callbacks? : yes > limit_classif : 10 > limit_nextfile : 10000 > limit_decompr : 1000 > socket_check : yes > Sophie version : 3.04 > NOTICE : pSAVI cleaned up and released/terminated > > > I am calling sophie with qmail-scanner. > > Trey Nolen > > > _______________________________________________ > vtools mailing list > [email protected] > http://www.vanja.com/list/listinfo.cgi/vtools -- Scott Walker Software Integration & Support Engineer, Sophos Tel: 604 484 6883 Web: www.sophos.com Sophos - protecting businesses against viruses and spam