Running a CVS snapshot of clamav downloaded yesterday, version info:-

ClamAV version devel-20040226, clamav-milter version 0.67h

Started ClamAV & clamav-milter at 12:27 yesterday, and it died due to a
SIGABRT at 8:45 this morning. To have it running for 20 hours without a
problem is one of the best results I've had for some time. Also, the
runaway child process problem seems to have been fixed, as it now
actually stops at the configured number of max-children, rather than
carrying on regardless.

After it was running, I got periodic messages like this:-

Feb 26 19:01:11 castor clamav-milter[31235]: write failure to clamd

I had 20 of these errors logged while it was running. They didn't seem
to cause any significant problems, however, so may not be important.
When it actually fell over, I got this:-

Feb 27 08:42:16 castor clamav-milter[29675]: i1R8gGYq029673: clean
message from <[EMAIL PROTECTED]>
Feb 27 08:45:14 castor clamav-milter[30177]: hit max-children limit (5
>= 5): waiting for some to exit
Feb 27 08:45:17 castor clamav-milter[30173]: i1R8jCYq030171: clean
message from <[EMAIL PROTECTED]>
Feb 27 08:46:14 castor clamav-milter[30177]: Timeout waiting for a child
to die
Feb 27 09:46:45 castor sendmail[7282]: i1R9fjYq007282: Milter
(ClamAVFilter): error connecting to filter: Connection timed out with
/var/run/clamav/clamav-milter.ctl
Feb 27 09:47:08 castor sendmail[7298]: i1R9g8Yq007298: Milter
(ClamAVFilter): error connecting to filter: Connection timed out with
/var/run/clamav/clamav-milter.ctl

This last message then repeated with every message that passed through
sendmail, until I restarted clamav-milter. I did not have to restart
clamd. A core dump was generated by clamav-milter timed at 8:46. Doing a
backtrace on the core dump produced the following output:-

# gdb /usr/sbin/clamav-milter /core.30177
GNU gdb 2002-04-01-cvs
Copyright 2002 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you
are welcome to change it and/or distribute copies of it under certain
conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "i386-linux"...
Core was generated by `/usr/sbin/clamav-milter --max-children=5 -olq
local:/var/run/clamav/clamav-milt'.
Program terminated with signal 6, Aborted.
Reading symbols from /usr/lib/libclamav.so.1...done.
Loaded symbols for /usr/lib/libclamav.so.1
Reading symbols from /usr/lib/libz.so.1...done.
Loaded symbols for /usr/lib/libz.so.1
Reading symbols from /usr/lib/libbz2.so.1.0...done.
Loaded symbols for /usr/lib/libbz2.so.1.0
Reading symbols from /usr/lib/libgmp.so.3...done.
Loaded symbols for /usr/lib/libgmp.so.3
Reading symbols from /lib/libpthread.so.0...done.
Loaded symbols for /lib/libpthread.so.0
Reading symbols from /lib/libc.so.6...done.
Loaded symbols for /lib/libc.so.6
Reading symbols from /lib/ld-linux.so.2...done.
Loaded symbols for /lib/ld-linux.so.2
#0  0x400bf781 in kill () from /lib/libc.so.6
(gdb) bt
#0  0x400bf781 in kill () from /lib/libc.so.6
#1  0x4008ae5e in pthread_kill () from /lib/libpthread.so.0
#2  0x4008b339 in raise () from /lib/libpthread.so.0
#3  0x400c0be1 in abort () from /lib/libc.so.6
#4  0x400b9e42 in __assert_fail () from /lib/libc.so.6
#5  0x0804c789 in clamfi_close (ctx=0x805a870) at clamav-milter.c:2199
#6  0x0804fec1 in mi_engine ()
#7  0x0804ebb9 in mi_handle_session ()
#8  0x0804e3e5 in mi_thread_handle_wrapper ()
#9  0x400880ba in pthread_start_thread () from /lib/libpthread.so.0
(gdb) q

Hopefully this will help track down the problem.

On the positive side, ClamAV caught 63 infected messages for me in the
time it was running this time, and this version is definitely
considerably more stable than many of the previous versions I've used.

Mike.



-------------------------------------------------------
SF.Net is sponsored by: Speed Start Your Linux Apps Now.
Build and deploy apps & Web services for Linux with
a free DVD software kit from IBM. Click Now!
http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click
_______________________________________________
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users

Reply via email to