Nigel Horne wrote:

> When it happens, is clamd still running? Do you see any error messages from it?

Log messages look like this:-

Oct 22 07:16:09 castor clamd[7603]: SelfCheck: Database status OK.
Oct 22 08:16:45 castor clamd[7603]: SelfCheck: Database status OK.
Oct 22 09:17:21 castor clamd[7603]: SelfCheck: Database status OK.
Oct 22 09:35:07 castor clamd[7603]: Session 0 stopped due to timeout.
Oct 22 09:38:05 castor clamd[7603]: Session 2 stopped due to timeout.
Oct 22 09:39:56 castor clamd[7603]: Session 1 stopped due to timeout.
Oct 22 09:40:10 castor clamd[7603]: Session 0 stopped due to timeout.

Then more "stopped due to timeout" messages for a while, until:-

Oct 22 10:17:57 castor clamd[7603]: SelfCheck: Database status OK.
Oct 22 10:18:06 castor clamd[7603]: Session 4 stopped due to timeout.
Oct 22 10:18:10 castor clamd[7603]: Session 0 stopped (exiting).
Oct 22 10:18:10 castor clamd[7603]: Session 1 stopped (exiting).
Oct 22 10:18:10 castor clamd[7603]: Session 2 stopped (exiting).
Oct 22 10:18:10 castor clamd[7603]: Session 3 stopped (exiting).
Oct 22 10:18:10 castor clamd[7603]: Session 4 stopped (exiting).
Oct 22 10:18:10 castor clamav-milter[7520]: recv failed from clamd
getting PORT
Oct 22 10:18:10 castor clamav-milter[8051]: recv failed from clamd
getting PORT
Oct 22 10:18:10 castor clamav-milter[7394]: recv failed from clamd
getting PORT
Oct 22 10:18:10 castor clamd[7603]: Socket file removed.
Oct 22 10:18:10 castor clamav-milter[7462]: recv failed from clamd
getting PORT
Oct 22 10:18:10 castor clamd[7603]: Pid file removed.
Oct 22 10:18:10 castor clamav-milter[7372]: recv failed from clamd
getting PORT

At 10:18:11, I bounced clamd, sendmail, and associated milters, and all
was well again.

> Do you have ScanArchive enabled?

Yes. My clamav.conf is:-

LocalSocket /var/run/clamd.ctl
ScanMail
ScanArchive
StreamSaveToDisk
StreamMaxLength 35M
ArchiveMaxRecursion 5
ArchiveMaxFiles 1000
ArchiveMaxFileSize 15M
ThreadTimeout 180
MaxThreads 5
MaxConnectionQueueLength 15
LogSyslog
PidFile /var/run/clamd.pid
DataDirectory /var/lib/clamav/
SelfCheck 3600

HTH,

Mike.



-------------------------------------------------------
This SF.net email is sponsored by: The SF.net Donation Program.
Do you like what SourceForge.net is doing for the Open
Source Community?  Make a contribution, and help us add new
features and functionality. Click here: http://sourceforge.net/donate/
_______________________________________________
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users

Reply via email to