Hello:Isn't 0.65 known to have problems? I use daily snapshot (devel-20040115) and it works fine so far.
In the past few days we have experienced multiple stability problems with clamav. Here is our environment:
Solaris 9 (sparc) mimedefang 2.36 w/ sendmail 8.12.10 clamav 0.65
This was submitted to [EMAIL PROTECTED] yesterday... just curious, is there any type of acknowledgment that we should expect from such submittals?Some acknowledgments are in ChangeLog.
Here is an example of the problem from today. The previous entry in the log was from an hour earlier and all was OK. We discovered freshclam had died (with no notice sent) when we were preparing the documentation for the clamd problem. We received no notice that freshclam had any problems or had died.
I use freshclam -d on Solaris9, and it didn't die during "Malformed CVD header" period.
ClamAV update process started at Tue Jan 20 23:28:04 2004
main.cvd is up to date (version: 18, sigs: 19810, f-level: 1, builder: tomek)
daily.cvd is up to date (version: 94, sigs: 488, f-level: 1, builder: diego)
-------------------------------------- ClamAV update process started at Wed Jan 21 01:28:04 2004 ERROR: Malformed CVD header detected. ERROR: Can't read main.cvd header from clamav.antispam.or.id (202.134.0.71) Trying again... ClamAV update process started at Wed Jan 21 01:28:05 2004 ERROR: Malformed CVD header detected. ERROR: Can't read main.cvd header from clamav.antispam.or.id (202.134.0.71) Trying again... ClamAV update process started at Wed Jan 21 01:28:06 2004 ERROR: Malformed CVD header detected. ERROR: Can't read main.cvd header from clamav.antispam.or.id (202.134.0.71) Giving up... ClamAV update process started at Wed Jan 21 01:28:06 2004 ERROR: Malformed CVD header detected. ERROR: Can't read main.cvd header from database.clamav.net (202.134.0.71) Trying again... ClamAV update process started at Wed Jan 21 01:28:08 2004 ERROR: Malformed CVD header detected. ERROR: Can't read main.cvd header from database.clamav.net (202.134.0.71) Trying again... ClamAV update process started at Wed Jan 21 01:28:09 2004 ERROR: Malformed CVD header detected. ERROR: Can't read main.cvd header from database.clamav.net (202.134.0.71) Giving up...
--------------------------------------
ClamAV update process started at Wed Jan 21 03:28:09 2004
main.cvd is up to date (version: 18, sigs: 19810, f-level: 1, builder: tomek)
daily.cvd is up to date (version: 94, sigs: 488, f-level: 1, builder: diego)
CLAMD PROBLEMS:
===============
Yesterday, just before 11:00 we started getting all sorts of 'strange' mimedefang errors -- none of which were 'problem running virus scanner'. Checking, we found that clamd was not running. (We use clamdscan in mimedefang, not clamd directly, as it appears to be somewhat better at catching some viruses.)
Notice that it appeared to die the first time shortly after finding 'Worm.Gibe.F' -- with no indication of why it died. (The virus hit was successfully passed back to mimedefang.)
The problem might be in "
Mon Jan 19 12:04:37 2004 -> Mail files support enabled.
"
Try commenting ScanMail on clamav.conf. I don't know how stable (or reliable) ScanMail support is now, but since you use mimedefang you wont need clamd to unpack attachments. Disabling it will at least reduce scanning time a little.
Regards,
Fajar A. Nugraha
------------------------------------------------------- The SF.Net email is sponsored by EclipseCon 2004 Premiere Conference on Open Tools Development and Integration See the breadth of Eclipse activity. February 3-5 in Anaheim, CA. http://www.eclipsecon.org/osdn _______________________________________________ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
