I am using freebsd, postfix, amavisd-new, spamassassin and clamav (all latest version)in a server pentium iv with 512 RAM.
Top shows that I have only 41M free and I think that 221M inact is very high
Mem: 119M Active, 221M Inact, 93M Wired, 19M Cache, 60M Buf, 41M Free
Is it normal?
-----Mensagem original-----
De: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
Enviada em: quinta-feira, 9 de setembro de 2004 00:29
Para: [EMAIL PROTECTED]
Assunto: Clamav-users digest, Vol 1 #975 - 3 msgs
Send Clamav-users mailing list submissions to
[EMAIL PROTECTED]
To subscribe or unsubscribe via the World Wide Web, visit
https://lists.sourceforge.net/lists/listinfo/clamav-users
or, via email, send a message with subject or body 'help' to
[EMAIL PROTECTED]
You can reach the person managing the list at
[EMAIL PROTECTED]
When replying, please edit your Subject line so it is more specific than "Re: Contents of Clamav-users digest..."
Today's Topics:
1. Re: Virus Distribution (=?ISO-8859-1?Q?Timo_Sch=F6ler?=)
2. Re: Virus Distribution (Doug Hardie)
3. ClamAV 0.75.1 building problems. (D Walsh)
--__--__--
Message: 1
Cc: Doug Hardie <[EMAIL PROTECTED]>
From: =?ISO-8859-1?Q?Timo_Sch=F6ler?= <[EMAIL PROTECTED]>
Subject: Re: [Clamav-users] Virus Distribution
Date: Wed, 8 Sep 2004 21:40:42 +0200
To: [EMAIL PROTECTED]
Reply-To: [EMAIL PROTECTED]
Thus spake Doug Hardie sometime Today...
>
> On Sep 8, 2004, at 12:16, Timo Sch=F6ler wrote:
>
>> Doug Hardie wrote:
>>
>>> I have a cron job that scans the clamd.log file every day and
>>> counts=20=
>>> the specific virusus found. While the numbers tend to vary a bit=20
>>> from day to day the relative ratios between the various viruses=20
>>> found tend to stay the same - except for Worm.Zafi.B. One day it=20
>>> will find 1100 of them and the next day 8. It is never consistent.
>>> =20=
>>> I am not seeing any significant number of viruses slipping through.
>>> =20=
>>> It seems to be some sort of distribution issue with that virus=20
>>> itself. The others all seemed to come on strong at first and
>>> then=20=
>>> die down to residual annoyances. But not this one. It keeps
>>> coming=20=
>>> back in volume periodically. Any ideas what makes this one so=20
>>> different from the rest?
>>
>> perhaps this may be interesting stuff for you:
>>
>> http://www.cs.berkeley.edu/~nweaver/sapphire/
>
> Thanks but I would expect from that that the worm activity would
> tend=20=
> to die down to a relatively constant nuisance level. However, its
> not=20=
> doing that every couple days I get another flood of them.
there may be several reasons:
i) changing network behaviour (route flaps, etc.)
ii) changing effectiveness of virus filters et al.
iii) built-in automatisms in worm/virus itself
NB: it is not always best to spread a virus/worm at the highest=20 available speed (depends on number of infected hosts, bandwidth=20 available to the hosts, etc.).
i'm sure i missed another point i didn't think of now ;)
--=20
mit vorzueglichster Hochachtung/best regards,
Timo Schoeler
//macfinity -- finest IT services | Triftstrasse 39 | 13353 Berlin |=20 Germany Fon ++49 30 25 20 30 20 | Fax ++49 30 25 20 30 19 PGP data http://www.macfinity.net/~tis/contact/PGPPKB_timo.schoeler.txt=
--__--__--
Message: 2
Cc: [EMAIL PROTECTED]
From: Doug Hardie <[EMAIL PROTECTED]>
Subject: Re: [Clamav-users] Virus Distribution
Date: Wed, 8 Sep 2004 13:52:52 -0700
To: =?ISO-8859-1?Q?Timo_Sch=F6ler?= <[EMAIL PROTECTED]>
Reply-To: [EMAIL PROTECTED]
Those certainly could be it, but it is unusual compared with the other=20=
viruses we see daily. I wonder if there is more to this one than has=20 been foun yet.
On Sep 8, 2004, at 12:40, Timo Sch=F6ler wrote:
> Thus spake Doug Hardie sometime Today...
>>
>> On Sep 8, 2004, at 12:16, Timo Sch=F6ler wrote:
>>
>>> Doug Hardie wrote:
>>>
>>>> I have a cron job that scans the clamd.log file every day and=20
>>>> counts the specific virusus found. While the numbers tend to
>>>> vary=20=
>>>> a bit from day to day the relative ratios between the various=20
>>>> viruses found tend to stay the same - except for Worm.Zafi.B.
>>>> >
>>>> day it will find 1100 of them and the next day 8. It is never=20
>>>> consistent. I am not seeing any significant number of viruses=20
>>>> slipping through. It seems to be some sort of distribution
>>>> issue=20=
>>>> with that virus itself. The others all seemed to come on strong
>>>> at=20=
>>>> first and then die down to residual annoyances. But not this one.
>>>> =20=
>>>> It keeps coming back in volume periodically. Any ideas what
>>>> makes=20=
>>>> this one so different from the rest?
>>>
>>> perhaps this may be interesting stuff for you:
>>>
>>> http://www.cs.berkeley.edu/~nweaver/sapphire/
>>
>> Thanks but I would expect from that that the worm activity would
>> tend=20=
>> to die down to a relatively constant nuisance level. However, its=20
>> not doing that every couple days I get another flood of them.
>
> there may be several reasons:
>
> i) changing network behaviour (route flaps, etc.)
>
> ii) changing effectiveness of virus filters et al.
>
> iii) built-in automatisms in worm/virus itself
>
> NB: it is not always best to spread a virus/worm at the highest=20
> available speed (depends on number of infected hosts, bandwidth=20
> available to the hosts, etc.).
>
> i'm sure i missed another point i didn't think of now ;)
>
> --=20
> mit vorzueglichster Hochachtung/best regards,
>
> Timo Schoeler
> //macfinity -- finest IT services | Triftstrasse 39 | 13353 Berlin
> |=20=
> Germany
> Fon ++49 30 25 20 30 20 | Fax ++49 30 25 20 30 19
> PGP data ="">
http://www.macfinity.net/~tis/contact/PGPPKB_timo.schoeler.txt
>
>
--__--__--
Message: 3
To: ClamAV <[EMAIL PROTECTED]>
From: D Walsh <[EMAIL PROTECTED]>
Date: Wed, 8 Sep 2004 17:37:22 -0400
Subject: [Clamav-users] ClamAV 0.75.1 building problems.
Reply-To: [EMAIL PROTECTED]
In an attempt to upgrade my server and make use of this software, I've
done the following:
cd /build
gnutar -xzvf clamav-0.75.1.tar.gz
mv ./clamav-0.75.1 ./clamav
cd clamav
./configure --prefix=/usr
sudo make
sudo make install > build.txt
The program doesn't run, from what I can tell, the conf files are not
being installed and I was wondering if someone has a list of files that
are supposed to be installed (what/where) with this build so I can
verify what else is missing from the install.
Any help would be appreciated.
here is the results of the 'make install' command ______________________________________
Making install in libclamav
test -z "/usr/lib" || mkdir -p -- . "/usr/lib"
/bin/sh ../libtool --mode=install /usr/bin/install -c 'libclamav.la'
'/usr/lib/libclamav.la'
/usr/bin/install -c .libs/libclamav.1.0.4.dylib
/usr/lib/libclamav.1.0.4.dylib
(cd /usr/lib && rm -f libclamav.1.dylib && ln -s libclamav.1.0.4.dylib
libclamav.1.dylib)
(cd /usr/lib && rm -f libclamav.dylib && ln -s libclamav.1.0.4.dylib
libclamav.dylib)
/usr/bin/install -c .libs/libclamav.lai /usr/lib/libclamav.la /usr/bin/install -c .libs/libclamav.a /usr/lib/libclamav.a ranlib /usr/lib/libclamav.a chmod 644 /usr/lib/libclamav.a
----------------------------------------------------------------------
Libraries have been installed in:
/usr/lib
If you ever happen to want to link against installed libraries in a given directory, LIBDIR, you must either use libtool, and specify the full pathname of the library, or use the `-LLIBDIR' flag during linking and do at least one of the following:
- add LIBDIR to the `DYLD_LIBRARY_PATH' environment variable
during execution
See any operating system documentation about shared libraries for more information, such as the ld(1) and ld.so(8) manual pages.
----------------------------------------------------------------------
test -z "/usr/include" || mkdir -p -- . "/usr/include"
/usr/bin/install -c -m 644 'clamav.h' '/usr/include/clamav.h' Making install in clamscan test -z "/usr/bin" || mkdir -p -- . "/usr/bin"
/bin/sh ../libtool --mode=install /usr/bin/install -c 'clamscan'
'/usr/bin/clamscan'
/usr/bin/install -c .libs/clamscan /usr/bin/clamscan
make[2]: Nothing to be done for `install-data-am'.
Making install in clamd
test -z "/usr/sbin" || mkdir -p -- . "/usr/sbin"
/bin/sh ../libtool --mode=install /usr/bin/install -c 'clamd'
'/usr/sbin/clamd'
/usr/bin/install -c .libs/clamd /usr/sbin/clamd
make[2]: Nothing to be done for `install-data-am'.
Making install in clamdscan
test -z "/usr/bin" || mkdir -p -- . "/usr/bin"
/bin/sh ../libtool --mode=install /usr/bin/install -c 'clamdscan'
'/usr/bin/clamdscan'
/usr/bin/install -c .libs/clamdscan /usr/bin/clamdscan
make[2]: Nothing to be done for `install-data-am'.
Making install in freshclam
test -z "/usr/bin" || mkdir -p -- . "/usr/bin"
/bin/sh ../libtool --mode=install /usr/bin/install -c 'freshclam'
'/usr/bin/freshclam'
/usr/bin/install -c .libs/freshclam /usr/bin/freshclam
make[2]: Nothing to be done for `install-data-am'.
Making install in sigtool
test -z "/usr/bin" || mkdir -p -- . "/usr/bin"
/bin/sh ../libtool --mode=install /usr/bin/install -c 'sigtool'
'/usr/bin/sigtool'
/usr/bin/install -c .libs/sigtool /usr/bin/sigtool
make[2]: Nothing to be done for `install-data-am'.
Making install in database
/bin/sh ../mkinstalldirs /usr/share/clamav
Making install in docs
make[2]: Nothing to be done for `install-exec-am'.
test -z "/usr/share/man/man1" || mkdir -p -- . "/usr/share/man/man1"
/usr/bin/install -c -m 644 './man/clamscan.1'
'/usr/share/man/man1/clamscan.1'
/usr/bin/install -c -m 644 './man/freshclam.1'
'/usr/share/man/man1/freshclam.1'
/usr/bin/install -c -m 644 './man/sigtool.1'
'/usr/share/man/man1/sigtool.1'
/usr/bin/install -c -m 644 './man/clamdscan.1'
'/usr/share/man/man1/clamdscan.1'
test -z "/usr/share/man/man5" || mkdir -p -- . "/usr/share/man/man5"
/usr/bin/install -c -m 644 './man/clamav.conf.5'
'/usr/share/man/man5/clamav.conf.5'
/usr/bin/install -c -m 644 './man/freshclam.conf.5'
'/usr/share/man/man5/freshclam.conf.5'
test -z "/usr/share/man/man8" || mkdir -p -- . "/usr/share/man/man8"
/usr/bin/install -c -m 644 './man/clamd.8'
'/usr/share/man/man8/clamd.8'
/usr/bin/install -c -m 644 './man/clamav-milter.8'
'/usr/share/man/man8/clamav-milter.8'
Making install in etc
/bin/sh ../mkinstalldirs /usr/etc
Making install in clamav-milter
test -z "/usr/sbin" || mkdir -p -- . "/usr/sbin"
test -z "/usr/share/man/man8" || mkdir -p -- . "/usr/share/man/man8" test -z "/usr/bin" || mkdir -p -- . "/usr/bin"
/usr/bin/install -c 'clamav-config' '/usr/bin/clamav-config' test -z "/usr/lib/pkgconfig" || mkdir -p -- . "/usr/lib/pkgconfig"
/usr/bin/install -c -m 644 'libclamav.pc'
'/usr/lib/pkgconfig/libclamav.pc'
--__--__--
_______________________________________________
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users
End of Clamav-users Digest
