clamdscan / ClamAV version devel-20040312
FreeBSD 4.9

I'm still seeing clamdscan processes "hang" every now and then.  They
eventually exit but only after a VERY long time. 5+ minutes usually. (maybe
on the thread timeout value).  I've checked our logs and it almost always
happens when the database reloads new defs or shortly there after.

It hung for shortly after loading the database upon scanning the following
small files...

Mon Mar 15 07:23:13 2004:25444: File: msg-25444-1.txt (375 bytes)
Mon Mar 15 07:23:13 2004:25444: File: msg-25444-2.html (2094 bytes)
Mon Mar 15 07:23:13 2004:25444: File: msg-25444-3.jpg (335896 bytes)


>From our email handler debug:

Mon Mar 15 07:23:13 2004:25444: ClamAV version devel-20040312
Mon Mar 15 07:23:13 2004:25444: Running /usr/local/bin/clamdscan --stdout
Mon Mar 15 07:30:24 2004:25444: Reaper - pid: 25445 exited
Mon Mar 15 07:30:24 2004:25444: Result was <ACCEPT> 0
Mon Mar 15 07:30:24 2004:25444: Child exiting

As you can see it took almost seven minutes for clamdscan to exit from the
time it was called.

Clip from the clamd syslog when this happened:

Mar 15 07:21:12 mx1-a clamd[5474]: /var/tmp/scavs/5505/0/msg-25408-2.zip:
Worm.SomeFool.Gen-2 FOUND
Mar 15 07:23:11 mx1-a clamd[5474]: SelfCheck: Database modification
detected. Forcing reload.
Mar 15 07:23:11 mx1-a clamd[5474]: Reading databases from
/usr/local/share/clamav
Mar 15 07:30:23 mx1-a clamd[5474]: Database correctly reloaded (20478
viruses) 
Mar 15 08:06:42 mx1-a clamd[5474]: /var/tmp/scavs/25593/0/msg-26623-3.zip:
Encrypted.Zip FOUND


--
Robert Blayzor, BOFH
INOC, LLC
[EMAIL PROTECTED]
PGP: http://www.inoc.net/~dev/
Key fingerprint = 1E02 DABE F989 BC03 3DF5  0E93 8D02 9D0B CB1A A7B0

Please excuse me, I have to circuit an AC line through my head to get this
database working.




-------------------------------------------------------
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click
_______________________________________________
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users

Reply via email to