<div dir="ltr">Excellent! Well done, Alex. That was a tricky one.</div><div class="gmail_extra"><br><br><div class="gmail_quote">On Mon, Jul 8, 2013 at 7:17 PM, Wolf Halton <span dir="ltr"><<a href="mailto:wolf.halton@gmail.com" target="_blank">wolf.halton@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><p>Thanks for that update. Nice to know. </p><div class="im HOEnZb">
<p>Wolf Halton<br>
--<br>
<a href="http://wolfhalton.info" target="_blank">http://wolfhalton.info</a> <br>
Apache developer:<br>
<a href="mailto:wolfhalton@apache.org" target="_blank">wolfhalton@apache.org</a></p>
</div><div class="HOEnZb"><div class="h5"><div class="gmail_quote">On Jul 7, 2013 2:30 PM, "Alex Carver" <<a href="mailto:agcarver%2Bale@acarver.net" target="_blank">agcarver+ale@acarver.net</a>> wrote:<br type="attribution">
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
I think I may have figured out the lag problem. ClamAV was still running its default config which updates every hour (!). I don't even scan once a week so I certainly don't need an update every hour. However, it's not smart enough to abort quickly if there's an I/O issue (like a slow mirror) so it just hangs on.<br>
<br>
At the same time integrit and rkhunter both take off running (integrit once per night and rkhunter once per week). Both of them were scanning clamav's files while clamav had them open to update. To top that off would be all the other disk I/O going on at various times (mysql actively handling data requests, me fiddling around at the command line, SMART probing the disks, other cron jobs, etc.)<br>
<br>
So one big I/O collision later, nothing runs properly. As soon as I killed off clamav's freshclam updater, though, everything took off like normal and all the delays went away. So freshclam seems to be the main culprit.<br>
<br>
I'm still going to keep an eye on it but for now I killed freshclam's daemon mode and put a script into cron.weekly so that it only updates once per week. I also have rkhunter and integrit avoiding the clamav databases so I think it'll finally behave.<br>
<br>
On 7/2/2013 12:19, Alex Carver wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
Ok, so it hung up again. I've got a good strace and a bad strace for<br>
starting up vi. The good strace shows the whole trace taking about<br>
three seconds. The bad strace shows the whole trace taking 20 seconds.<br>
</blockquote>
<br>
<br>
______________________________<u></u>_________________<br>
Ale mailing list<br>
<a href="mailto:Ale@ale.org" target="_blank">Ale@ale.org</a><br>
<a href="http://mail.ale.org/mailman/listinfo/ale" target="_blank">http://mail.ale.org/mailman/<u></u>listinfo/ale</a><br>
See JOBS, ANNOUNCE and SCHOOLS lists at<br>
<a href="http://mail.ale.org/mailman/listinfo" target="_blank">http://mail.ale.org/mailman/<u></u>listinfo</a><br>
</blockquote></div>
</div></div><br>_______________________________________________<br>
Ale mailing list<br>
<a href="mailto:Ale@ale.org">Ale@ale.org</a><br>
<a href="http://mail.ale.org/mailman/listinfo/ale" target="_blank">http://mail.ale.org/mailman/listinfo/ale</a><br>
See JOBS, ANNOUNCE and SCHOOLS lists at<br>
<a href="http://mail.ale.org/mailman/listinfo" target="_blank">http://mail.ale.org/mailman/listinfo</a><br>
<br></blockquote></div><br></div>