Nigel Horne wrote: > When it happens, is clamd still running? Do you see any error messages from it?
Log messages look like this:- Oct 22 07:16:09 castor clamd[7603]: SelfCheck: Database status OK. Oct 22 08:16:45 castor clamd[7603]: SelfCheck: Database status OK. Oct 22 09:17:21 castor clamd[7603]: SelfCheck: Database status OK. Oct 22 09:35:07 castor clamd[7603]: Session 0 stopped due to timeout. Oct 22 09:38:05 castor clamd[7603]: Session 2 stopped due to timeout. Oct 22 09:39:56 castor clamd[7603]: Session 1 stopped due to timeout. Oct 22 09:40:10 castor clamd[7603]: Session 0 stopped due to timeout. Then more "stopped due to timeout" messages for a while, until:- Oct 22 10:17:57 castor clamd[7603]: SelfCheck: Database status OK. Oct 22 10:18:06 castor clamd[7603]: Session 4 stopped due to timeout. Oct 22 10:18:10 castor clamd[7603]: Session 0 stopped (exiting). Oct 22 10:18:10 castor clamd[7603]: Session 1 stopped (exiting). Oct 22 10:18:10 castor clamd[7603]: Session 2 stopped (exiting). Oct 22 10:18:10 castor clamd[7603]: Session 3 stopped (exiting). Oct 22 10:18:10 castor clamd[7603]: Session 4 stopped (exiting). Oct 22 10:18:10 castor clamav-milter[7520]: recv failed from clamd getting PORT Oct 22 10:18:10 castor clamav-milter[8051]: recv failed from clamd getting PORT Oct 22 10:18:10 castor clamav-milter[7394]: recv failed from clamd getting PORT Oct 22 10:18:10 castor clamd[7603]: Socket file removed. Oct 22 10:18:10 castor clamav-milter[7462]: recv failed from clamd getting PORT Oct 22 10:18:10 castor clamd[7603]: Pid file removed. Oct 22 10:18:10 castor clamav-milter[7372]: recv failed from clamd getting PORT At 10:18:11, I bounced clamd, sendmail, and associated milters, and all was well again. > Do you have ScanArchive enabled? Yes. My clamav.conf is:- LocalSocket /var/run/clamd.ctl ScanMail ScanArchive StreamSaveToDisk StreamMaxLength 35M ArchiveMaxRecursion 5 ArchiveMaxFiles 1000 ArchiveMaxFileSize 15M ThreadTimeout 180 MaxThreads 5 MaxConnectionQueueLength 15 LogSyslog PidFile /var/run/clamd.pid DataDirectory /var/lib/clamav/ SelfCheck 3600 HTH, Mike. ------------------------------------------------------- This SF.net email is sponsored by: The SF.net Donation Program. Do you like what SourceForge.net is doing for the Open Source Community? Make a contribution, and help us add new features and functionality. Click here: http://sourceforge.net/donate/ _______________________________________________ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users