On Fri, 2004-03-19 at 01:41, Sergey wrote: > > On a stock RedHat 9.0 box (3 boxen load balanced) with updated kernel > > (2.4.20-20.9smp), I have stability problems with clamd. > Possible it's similar with my problem... What is in clamd.log at this > time ? > I my logs: > Tue Mar 16 18:52:25 2004 -> ERROR: accept() failed: Too many open files > on 2.2 kernel and > Thu Mar 18 18:06:06 2004 -> ERROR: pthread_create failed > on 2.4 kernel
Mine looked different than that (this was before I enabled verbose logging and it hasn't messed up since). Here's from box #1: stream: Worm.Mydoom.F FOUND stream: Worm.Bagle.Gen-1 FOUND Session 1 stopped due to timeout. Segmentation fault :-( Bye.. And here's a little later on on the same box: Session 2 stopped due to timeout. stream: Worm.Bagle.Gen-1 FOUND stream: Worm.SomeFool.Gen-2 FOUND SelfCheck: Database status OK. Segmentation fault :-( Bye.. Here's from box #3: Session 2 stopped due to timeout. Session 0 stopped due to timeout. Session 3 stopped due to timeout. Segmentation fault :-( Bye.. And a little later on on the same box: Session 0 stopped due to timeout. stream: Worm.SomeFool.Gen-1 FOUND Session 2 stopped due to timeout. stream: Worm.SomeFool.Gen-1 FOUND Segmentation fault :-( Bye.. Since I've started my testing, I've made the logging much more verbose than above and used the LD_ASSUME_KERNEL environment variable setting. The system has been running solidly for 19 hours now. If I was a betting man, I'd say that the environment variable fixed things, but I have to also acknowledge that it never segfaulted while I was debugging with the verbose logging. So technically it could be either one. Like I said though, my money is on the environment variable. > mail traffic is similar too (sometimes it more one message per second; > middle in day about 100K) Here's what my boxen are doing loadwise: Inbound per day totals: Mar 18 -> 55284 Delivered, both local and aliases: Mar 18 -> 7199 Refused by remote systems: Mar 18 -> 5480 Queued and probably delivered later: Mar 18 -> 17 Detected and rejected as spam Mar 18 -> 23498 Detected and rejected as virus Mar 18 -> 205 Refused/Dropped due to remote system errors: Mar 18 -> 992 I note that the spam levels dropped tremendously yesterday. I was rejecting about 35K a day. That's because spammers on Wednesday started using accented a e i o and u characters and SpamAssassin doesn't catch those with its current definitions (SA 2.63) which seem to be primarily English only. Blue skies... Todd ------------------------------------------------------- This SF.Net email is sponsored by: IBM Linux Tutorials Free Linux tutorial presented by Daniel Robbins, President and CEO of GenToo technologies. Learn everything from fundamentals to system administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click _______________________________________________ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
