squid[5207]: suspending ICAP service for too many failures squid[5207]: essential ICAP service is suspended: icap://127.0.0.1:1344/respmod [down,susp,detached,fail11] drweb-icapd[24101]: accept: Too many open files drweb-icapd[24101]: Exit with status 125 (Unexpected error)
Лимиты в системе выставлены были на 20тыс файлов, но после первого сбоя поднял до 60тыс. Проблемы не ушли.
Во время этих проблем drweb-netcheck.real утилизирует 100% ядра. Статус процесса в этот момент - R[unning]
Вот лог net-checker'а в момент сбоя
2017-Jun-06 16:20:47 [4757] Debug: Client 0x1: INIT 36032 as LocalJob 0x8cc0 2017-Jun-06 16:20:47 [4757] Debug: LocalJob 0x8cc0: Scan 2017-Jun-06 16:20:47 [4757] Debug: LocalJob 0x8cc0: Scan report received 2017-Jun-06 16:20:47 [4757] Debug: LocalJob 0x8cc1: File "/tmp/com.drweb.ncheck/9feb-28c8-cff3-dc12" 2017-Jun-06 16:20:47 [4757] Debug: Client 0x1: INIT 36033 as LocalJob 0x8cc1 2017-Jun-06 16:20:47 [4757] Debug: LocalJob 0x8cc1: Scan 2017-Jun-06 16:20:47 [4757] Debug: LocalJob 0x8a69: Get data 65536 2017-Jun-06 16:23:30 [4757] Error: Client 0x1: IO: Broken pipe 2017-Jun-06 16:23:30 [4757] Debug: Client 0x1: Destroyed 2017-Jun-06 16:23:30 [4757] Debug: LocalJob 0x8cc1: Destroyed 2017-Jun-06 16:23:30 [4757] Debug: LocalJob 0x8cc0: Destroyed 2017-Jun-06 16:23:30 [4757] Debug: LocalJob 0x8cbe: Destroyed 2017-Jun-06 16:23:30 [4757] Debug: LocalJob 0x8c5d: Destroyed 2017-Jun-06 16:23:30 [4757] Debug: LocalJob 0x8b6f: Destroyed 2017-Jun-06 16:23:30 [4757] Debug: LocalJob 0x8a69: Destroyed 2017-Jun-06 16:23:30 [4757] Debug: LocalJob 0x89d2: Destroyed 2017-Jun-06 16:23:30 [4757] Debug: LocalJob 0x857a: Destroyed 2017-Jun-06 16:23:30 [4757] Debug: LocalJob 0x73d6: Destroyed 2017-Jun-06 16:23:30 [4757] Debug: LocalJob 0x51ee: Destroyed 2017-Jun-06 16:23:51 [4757] Notice: Termination signal received, exiting...
Лечение - рестарт Dr.web.
Конфиг squid
icap_enable on icap_preview_enable on icap_preview_size 0 icap_persistent_connections on icap_send_client_ip on icap_send_client_username on icap_client_username_header X-Client-Username icap_client_username_encode off icap_service i_res respmod_precache bypass=0 icap://127.0.0.1:1344/respmod
У кого-то есть идеи как это полечить?