Todd Lyons wrote: > On Fri, 2004-04-02 at 14:09, Jesse Guardiani wrote: > >> Mar 31 didn't work for me. See other email on the subject. > > You can download the tarball that I used for mine at > http://downloads.mrball.net/SpamAssassin/clamav-0.70pre2.tar.gz > > The naming convention does not jive with clamav's official naming, it > just happens to be the second cvs snapshot that I took so it's called > pre2. > > >> # telnet -u /tmp/clamd >> Trying /tmp/clamd... > > Which telnet are you using that allows you connect to a unix socket like > that? (None of) my linuxen allow me to do that. I've not found any > other method short of a quickie perl script.
Pretty slick, eh? It's the default telnet with FreeBSD. Probably a local hack. >> With no luck. It's still hanging every ten minutes or so. > > Eh, that answers a lot of it. > > Every ten minutes? Sounds like the database checks might be causing you > issues. No, it has to be locking on incoming messages. I enabled Debug output to stdout and this is where it hangs: LibClamAV debug: Deal with header Received: (qmail 28178 invoked for bounce); 2 Apr 2004 07:22:19 -0000 LibClamAV debug: parseEmailHeader 'Received: (qmail 28178 invoked for bounce); 2 Apr 2004 07:22:19 -0000' LibClamAV debug: parseMimeHeader: cmd='Received', arg=' (qmail 28178 invoked for bounce); 2 Apr 2004 07:22:19 -0000' LibClamAV debug: Deal with header Date: 2 Apr 2004 07:22:19 -0000 LibClamAV debug: parseEmailHeader 'Date: 2 Apr 2004 07:22:19 -0000' LibClamAV debug: parseMimeHeader: cmd='Date', arg=' 2 Apr 2004 07:22:19 -0000' LibClamAV debug: Deal with header From: [EMAIL PROTECTED] LibClamAV debug: parseEmailHeader 'From: [EMAIL PROTECTED]' LibClamAV debug: parseMimeHeader: cmd='From', arg=' [EMAIL PROTECTED]' LibClamAV debug: Deal with header To: [EMAIL PROTECTED] LibClamAV debug: parseEmailHeader 'To: [EMAIL PROTECTED]' LibClamAV debug: parseMimeHeader: cmd='To', arg=' [EMAIL PROTECTED]' LibClamAV debug: Deal with header Subject: failure notice LibClamAV debug: parseEmailHeader 'Subject: failure notice' LibClamAV debug: parseMimeHeader: cmd='Subject', arg=' failure notice' LibClamAV debug: Deal with header X-Spam-Score: 2 (/) LibClamAV debug: parseEmailHeader 'X-Spam-Score: 2 (/)' LibClamAV debug: parseMimeHeader: cmd='X-Spam-Score', arg=' 2 (/)' LibClamAV debug: Deal with header X-ASC-Spam-int: 2 LibClamAV debug: parseEmailHeader 'X-ASC-Spam-int: 2' LibClamAV debug: parseMimeHeader: cmd='X-ASC-Spam-int', arg=' 2' LibClamAV debug: Deal with header X-Rook: catchall LibClamAV debug: parseEmailHeader 'X-Rook: catchall' LibClamAV debug: parseMimeHeader: cmd='X-Rook', arg=' catchall' LibClamAV debug: Deal with header X-Scan-Signature: 6494abb01dbfb3928319400cc2ad1431 LibClamAV debug: parseEmailHeader 'X-Scan-Signature: 6494abb01dbfb3928319400cc2ad1431' LibClamAV debug: parseMimeHeader: cmd='X-Scan-Signature', arg=' 6494abb01dbfb3928319400cc2ad1431' LibClamAV debug: Deal with header X-Virus: Virus Checked see http://www.antiviruscentre.com for details. LibClamAV debug: parseEmailHeader 'X-Virus: Virus Checked see http://www.antiviruscentre.com for details.' LibClamAV debug: parseMimeHeader: cmd='X-Virus', arg=' Virus Checked see http://www.antiviruscentre.com for details.' LibClamAV debug: Deal with header X-Spam: Spam Checked see http://www.antispamcentre.com for details. LibClamAV debug: parseEmailHeader 'X-Spam: Spam Checked see http://www.antispamcentre.com for details.' LibClamAV debug: parseMimeHeader: cmd='X-Spam', arg=' Spam Checked see http://www.antispamcentre.com for details.' LibClamAV debug: Deal with header X-UIDL: &3O!!EJ,!!;[EMAIL PROTECTED] LibClamAV debug: parseEmailHeader 'X-UIDL: &3O!!EJ,!!;[EMAIL PROTECTED]' LibClamAV debug: parseMimeHeader: cmd='X-UIDL', arg=' &3O!!EJ,!!;[EMAIL PROTECTED]' LibClamAV debug: Deal with header LibClamAV debug: End of header information LibClamAV debug: Recognized Qmail bounce file LibClamAV debug: parseEmailHeaders: return LibClamAV debug: in parseEmailBody(nBlobs = 0) LibClamAV debug: Parsing mail file LibClamAV debug: mimeType = 0 LibClamAV debug: 0 attachments found LibClamAV debug: 0 multiparts found LibClamAV debug: Found a bounce message > What's your "SelfCheck" setting in clamav.conf? I'll be it's > 600 seconds. It was at the default, but I've lowered it and raised it without change. It loads the databases OK at least 5 or 6 times before lockup: Fri Apr 2 18:18:46 2004 -> No stats for Database check - forcing reload Fri Apr 2 18:18:46 2004 -> Reading databases from /usr/local/share/clamav Fri Apr 2 18:18:49 2004 -> Database correctly reloaded (20789 viruses) Fri Apr 2 18:21:29 2004 -> /var/spool/qmailscan/tmp/chortos.wingnet.net108094808947017668/message.scr: Worm.SomeFool.P FOUND Fri Apr 2 18:21:30 2004 -> /var/spool/qmailscan/tmp/chortos.wingnet.net108094808947017668/orig-chortos.wingnet.net108094808947017668: Worm.SomeFool.P FOUND <locked here> I'll look into the locking thing. I'm also configuring a debug version so I can run ktrace on it. More in a bit. I can't go home until this silly thing is fixed... -- Jesse Guardiani, Systems Administrator WingNET Internet Services, P.O. Box 2605 // Cleveland, TN 37320-2605 423-559-LINK (v) 423-559-5145 (f) http://www.wingnet.net ------------------------------------------------------- This SF.Net email is sponsored by: IBM Linux Tutorials Free Linux tutorial presented by Daniel Robbins, President and CEO of GenToo technologies. Learn everything from fundamentals to system administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click _______________________________________________ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
