Freshclam has decided to fail to get a lookup on database.clamav.net
again, failing with:
Jul 28 08:29:09 ickx freshclam[19291]: ClamAV update process started at
Wed Jul 28 08:29:09 2004
Jul 28 08:29:10 ickx freshclam[19291]: ERROR: Can't get information
about database.clamav.net host.
Jul 28 08:29:10 ickx freshclam[19291]: ERROR: Connection with
database.clamav.net (IP: ???) failed.
Jul 28 08:29:10 ickx freshclam[19291]: Trying again...
So I ran strace /usr/bin/freshclam and got this (cut down to one
attempt):
write(2, "ClamAV update process started at"..., 58ClamAV update process
started at Wed Jul 28 08:29:12 2004
) = 58
write(3, "ClamAV update process started at"..., 58) = 58
time([1090999752]) = 1090999752
getpid() = 19291
rt_sigaction(SIGPIPE, {0x420db8b0, [], SA_RESTORER, 0x420277b8},
{SIG_DFL}, 8) = 0
send(4, "<182>Jul 28 08:29:12 freshclam[1"..., 97, 0) = 97
rt_sigaction(SIGPIPE, {SIG_DFL}, NULL, 8) = 0
open("main.cvd", O_RDONLY) = 7
fstat64(7, {st_mode=S_IFREG|0644, st_size=1103636, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1,
0) = 0x40017000
read(7, "ClamAV-VDB:08 Jul 2004 01-58 +02"..., 4096) = 4096
close(7) = 0
munmap(0x40017000, 4096) = 0
socket(PF_INET, SOCK_STREAM, IPPROTO_IP) = 7
socket(PF_UNIX, SOCK_STREAM, 0) = 8
connect(8, {sa_family=AF_UNIX, path="/var/run/.nscd_socket"}, 110) = 0
writev(8, [{"\2\0\0\0\4\0\0\0\24\0\0\0", 12}, {"database.clamav.net\0",
20}], 2) = 32
read(8, "\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\377\377\377\377\377\377"...,
32) = 32
close(8) = 0
write(2, "ERROR: ", 7ERROR: ) = 7
write(2, "Can\'t get information about data"..., 54Can't get information
about database.clamav.net host.
) = 54
write(3, "ERROR: Can\'t get information abo"..., 61) = 61
time([1090999752]) = 1090999752
getpid() = 19291
rt_sigaction(SIGPIPE, {0x420db8b0, [], SA_RESTORER, 0x420277b8},
{SIG_DFL}, 8) = 0
send(4, "<182>Jul 28 08:29:12 freshclam[1"..., 100, 0) = 100
rt_sigaction(SIGPIPE, {SIG_DFL}, NULL, 8) = 0
write(2, "ERROR: ", 7ERROR: ) = 7
write(2, "Connection with database.clamav."..., 54Connection with
database.clamav.net (IP: ???) failed.
) = 54
write(3, "ERROR: Connection with database."..., 61) = 61
time([1090999753]) = 1090999753
getpid() = 19291
rt_sigaction(SIGPIPE, {0x420db8b0, [], SA_RESTORER, 0x420277b8},
{SIG_DFL}, 8) = 0
send(4, "<182>Jul 28 08:29:13 freshclam[1"..., 100, 0) = 100
rt_sigaction(SIGPIPE, {SIG_DFL}, NULL, 8) = 0
alarm(0) = 0
write(2, "Giving up...\n", 13Giving up...
) = 13
Both host and dig return the A records quite happily, but freshclam is
still failing.
What I am puzzled about is the line that reads:
connect(8, {sa_family=AF_UNIX, path="/var/run/.nscd_socket"}, 110) = 0
that does not look right to me since I didn't think that nscd should be
running (I run a local copy of bind that has no forwarders so it goes to
the root servers when needed) as bind does its own DNS caching.
A quick check with chkconfig reveals that ncsd is started in runlevels 3
4 and 5, so I stopped it and instantly freshclam can resolve
database.clamav.net again.
Now, I don't know whether freshclam itself decides to call the nscd UNIX
socket or whether the resolver library does it, but it seems that
something upset nscd (I had an ADSL line drop due to a PPP time out
during the night) but something seems to have broken the link between
bind and the resolver library.
Actually, on further investigation of the failed freshclam strace, there
is no call to libresolv.so at all.
Can anyone explain what happened here? If not, then those of you seeing
the same problem might find a check of your configuration and services
useful.
--
Brian Morrison
bdm at fenrir dot org dot uk
GnuPG key ID DE32E5C5 - http://wwwkeys.uk.pgp.net/pgpnet/wwwkeys.html
-------------------------------------------------------
This SF.Net email is sponsored by BEA Weblogic Workshop
FREE Java Enterprise J2EE developer tools!
Get your free copy of BEA WebLogic Workshop 8.1 today.
http://ads.osdn.com/?ad_id=4721&alloc_id=10040&op=click
_______________________________________________
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users
