Vieri
l33t
Joined: 18 Dec 2005
Posts: 887
|
 Posted: Wed Feb 05, 2020 10:18 am Post subject: clamav-unofficial-sigs and very high CPU cycles |
 |
|
Hi,
I'm using clamav-unofficial-sigs because the default ClamAV signatures are unable to detect some malware that other commercial antivirus are.
The clamav-unofficial-sigs software (which actually downloads third-party clamav signatures) works great in my setup except for the fact that it uses up a LOT of CPU. Even on an enterprise-grade server its CPU usage can be extremely high (top can show a global value of 300% which I don't know exactly how to interpret on a system with multiple cores -- even pressing '1' to show the cores doesn't clear things up much). Anyway, I know clamd can be configured with niceness values in conf.d:
| Code: | CLAMD_NICELEVEL=3
FRESHCLAM_NICELEVEL=19
IONICE_LEVEL=2
|
The higher the value the "nicer" it is, which means that the clamd process should have lower priority.
So, if I want clamd to be as nice as possible, what values should I use in conf.d?
I'm guessing that these should be OK:
| Code: | CLAMD_NICELEVEL=19
FRESHCLAM_NICELEVEL=19
|
Any drawbacks?
What about IONICE_LEVEL?
According to rc.conf "The format is class[:data]".
So what does the default "2" mean? Does it mean that it's of class 2 (best-effort)?
Wouldn't the following be "nicer" on I/O?
What about this:
Vieri |
|
Other Things Gentoo
