Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 1 reply
  • Subscribers 1 subscriber
  • Views 5967 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

High CPU utilization

MCando

Hi, after updating our OES11.1 linux server to the latest antivirus version we're experimenting a constant high CPU utilization.

If I stop the sav-protect service everything returns to normal. I also have excluded the _admin and _NETWARE directories.

Don't know what else to do...please help.

This is the output of the top command:

 PID USER      PR  NI  VIRT  RES  SHR S   %CPU %MEM    TIME+  COMMAND
 4650 root      20   0  192m 144m 5100 S    102  1.8   3:08.84 savscand
14557 root      20   0  208m 141m 5020 S    100  1.8   1:44.81 savscand
 1080 root      20   0     0    0    0 S      2  0.0   0:06.10 kworker/3:0

This is our sophos version:

/opt/sophos-av/bin/savdstatus --version
Copyright 1989-2012 Sophos Limited. All rights reserved.
Sophos Anti-Virus       = 9.1.1
Threat detection engine = 3.39.0
Threat data             = 4.85
Threat count            = 4460365
Threat data release     = Mon Jan  7 00:00:00 2013
Last update             = Tue Jan 15 15:56:57 2013

And  this is the kernel version:

uname -a
Linux tgssafiles01 3.0.13-0.27-default #1 SMP Wed Feb 15 13:33:49 UTC 2012 (d73692b) x86_64 x86_64 x86_64 GNU/Linux

:36995


This thread was automatically locked due to age.
  • 0

    Both savscand are active, which indicates that on-access is taking the time. It might be useful to check your exclusions end with / so that they exclude those directories.

    Other than that, contact Support and they can give you scripts to report which files are being scanned.

    :37129