Hi,
I'm running clamav 0.80 on SuSE Linux 9.0 / Exim 4.43 / exiscan / sa-exim.
15 times a day clamd segfaults but continues to run:
Thu Nov 11 00:34:57 2004 -> Segmentation fault :-( Bye..
Thu Nov 11 01:11:32 2004 -> Segmentation fault :-( Bye..
Thu Nov 11 02:29:09 2004 -> Segmentation fault :-( Bye..
Thu Nov 11 03:29:59 2004 -> Segmentation fault :-( Bye..
Thu Nov 11 05:00:55 2004 -> Segmentation fault :-( Bye..
Thu Nov 11 06:18:15 2004 -> Segmentation fault :-( Bye..
Thu Nov 11 07:24:58 2004 -> Segmentation fault :-( Bye..
Thu Nov 11 08:58:22 2004 -> Segmentation fault :-( Bye..
Thu Nov 11 10:28:58 2004 -> Segmentation fault :-( Bye..
Thu Nov 11 12:30:40 2004 -> Segmentation fault :-( Bye..
Thu Nov 11 13:03:15 2004 -> Segmentation fault :-( Bye..
Thu Nov 11 14:50:17 2004 -> Segmentation fault :-( Bye..
Thu Nov 11 17:35:06 2004 -> Segmentation fault :-( Bye..
Thu Nov 11 19:32:01 2004 -> Segmentation fault :-( Bye..
Thu Nov 11 20:06:24 2004 -> Segmentation fault :-( Bye..
The listing unix sockets /var/lib/clamav/clamd.sock accumulate up to 10
or 12. Then exim / exiscan accepts no further mail because there is no
answer from /var/lib/clamav/clamd.sock.
I managed to get around it by counting the lines of "netstat -x | fgrep
clamd". If it's more than 5, clamd gets restarted.
How can I debug the segfaults?
Thu Nov 11 19:32:15 2004 -> --- Stopped at Thu Nov 11 19:32:15 2004
Thu Nov 11 19:33:37 2004 -> +++ Started at Thu Nov 11 19:33:37 2004
Thu Nov 11 19:33:37 2004 -> clamd daemon 0.80 (OS: linux-gnu, ARCH:
i386, CPU: i686)
Thu Nov 11 19:33:37 2004 -> Log file size limit disabled.
Thu Nov 11 19:33:37 2004 -> Verbose logging activated.
Thu Nov 11 19:33:37 2004 -> Running as user clamav (UID 98, GID 98)
Thu Nov 11 19:33:37 2004 -> Reading databases from /var/lib/clamav
Thu Nov 11 19:33:37 2004 -> Protecting against 26467 viruses.
Thu Nov 11 19:33:37 2004 -> Unix socket file /var/lib/clamav/clamd.sock
Thu Nov 11 19:33:37 2004 -> Setting connection queue length to 15
Thu Nov 11 19:33:37 2004 -> Listening daemon: PID: 10371
Thu Nov 11 19:33:37 2004 -> Archive: Archived file size limit set to
31457280 bytes.
Thu Nov 11 19:33:37 2004 -> Archive: Recursion level limit set to 5.
Thu Nov 11 19:33:37 2004 -> Archive: Files limit set to 1000.
Thu Nov 11 19:33:37 2004 -> Archive: Compression ratio limit set to 250.
Thu Nov 11 19:33:37 2004 -> Archive support enabled.
Thu Nov 11 19:33:37 2004 -> Archive: RAR support enabled.
Thu Nov 11 19:33:37 2004 -> Portable Executable support enabled.
Thu Nov 11 19:33:37 2004 -> Mail files support enabled.
Thu Nov 11 19:33:37 2004 -> OLE2 support enabled.
Thu Nov 11 19:33:37 2004 -> HTML support enabled.
Thu Nov 11 19:33:37 2004 -> Self checking every 1800 seconds.
Thu Nov 11 19:44:08 2004 ->
/var/spool/exim/scan/1CSJvI-0002kz-Dm/1CSJvI-0002kz-Dm.eml:
Worm.SomeFool.P FOUND
Thu Nov 11 19:48:23 2004 ->
/var/spool/exim/scan/1CSJza-0002lm-GY/1CSJza-0002lm-GY.eml:
Worm.SomeFool.P FOUND
Thu Nov 11 19:58:19 2004 ->
/var/spool/exim/scan/1CSK8k-0002mf-5f/1CSK8k-0002mf-5f.eml:
Worm.Lovgate.X FOUND
Thu Nov 11 20:05:09 2004 -> No stats for Database check - forcing reload
Thu Nov 11 20:05:09 2004 -> Reading databases from /var/lib/clamav
Thu Nov 11 20:05:10 2004 -> Database correctly reloaded (26467 viruses)
Thu Nov 11 20:06:24 2004 -> Segmentation fault :-( Bye..
Thu Nov 11 20:09:32 2004 ->
/var/spool/exim/scan/1CSKK4-0002nr-2L/1CSKK4-0002nr-2L.eml:
Worm.Mydoom.M FOUND
--
Bernhard Erdmann Tel. 0721-9211930
Wilhelm-Hausenstein-Allee 8 Fax 0721-9211932
D-76187 Karlsruhe E+ 0177-7454106
smime.p7s
Description: S/MIME Cryptographic Signature
_______________________________________________
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
