Greetings, We have had ClamAV hang or segfault several times in recent days. Here is a log from a segfault a few minutes ago. The system has just automatically restarted clamd a few minutes before the segfault (at the time the log begins), because clamd had hung.
> Sun Jun 11 12:15:16 2006 -> +++ Started at Sun Jun 11 12:15:16 2006 > Sun Jun 11 12:15:16 2006 -> clamd daemon 0.88.2 (OS: solaris2.9, ARCH: sparc, > CPU: sparc) > Sun Jun 11 12:15:16 2006 -> Log file size limited to 83886080 bytes. > Sun Jun 11 12:15:16 2006 -> Verbose logging activated. > Sun Jun 11 12:15:16 2006 -> Running as user defang (UID 104, GID 25) > Sun Jun 11 12:15:16 2006 -> Reading databases from /var/clamav/databases > Sun Jun 11 12:15:22 2006 -> Protecting against 59020 viruses. > Sun Jun 11 12:15:23 2006 -> WARNING: Socket file /var/clamav/clamd.sock > exists. Unclean shutdown? Removing... > Sun Jun 11 12:15:23 2006 -> Unix socket file /var/clamav/clamd.sock > Sun Jun 11 12:15:23 2006 -> Setting connection queue length to 60 > Sun Jun 11 12:15:23 2006 -> Listening daemon: PID: 11590 > Sun Jun 11 12:15:23 2006 -> Archive: Archived file size limit set to 47185920 > bytes. > Sun Jun 11 12:15:23 2006 -> Archive: Recursion level limit set to 12. > Sun Jun 11 12:15:23 2006 -> Archive: Files limit set to 1500. > Sun Jun 11 12:15:23 2006 -> Archive: Compression ratio limit set to 300. > Sun Jun 11 12:15:23 2006 -> Archive support enabled. > Sun Jun 11 12:15:23 2006 -> Archive: RAR support disabled. > Sun Jun 11 12:15:23 2006 -> Archive: Blocking encrypted archives. > Sun Jun 11 12:15:23 2006 -> Archive: Blocking archives that exceed limits. > Sun Jun 11 12:15:23 2006 -> Portable Executable support enabled. > Sun Jun 11 12:15:23 2006 -> Detection of broken executables enabled. > Sun Jun 11 12:15:23 2006 -> Mail files support enabled. > Sun Jun 11 12:15:23 2006 -> Mail: URL scanning enabled. > Sun Jun 11 12:15:23 2006 -> OLE2 support enabled. > Sun Jun 11 12:15:23 2006 -> HTML support enabled. > Sun Jun 11 12:15:23 2006 -> Self checking every 600 seconds. > Sun Jun 11 12:15:28 2006 -> > /var/spool/MIMEDefang/run/mdefang-k5BGFSK0011658/./Work/msg-18091-564.txt: OK > Sun Jun 11 12:16:01 2006 -> /tmp/.clamdwatch-05bFxWCGJZqZbxDj: > Eicar-Test-Signature FOUND > Sun Jun 11 12:19:01 2006 -> /tmp/.clamdwatch-i0XFbMnXhe1Z9bLS: > Eicar-Test-Signature FOUND > Sun Jun 11 12:20:01 2006 -> /tmp/.clamdwatch-555vzKPzD6VmN9hX: > Eicar-Test-Signature FOUND > Sun Jun 11 12:21:01 2006 -> /tmp/.clamdwatch-n8nsuuSNsi8OdYBX: > Eicar-Test-Signature FOUND > Sun Jun 11 12:24:02 2006 -> /tmp/.clamdwatch-EgFthk0psuFQo4s6: > Eicar-Test-Signature FOUND > Sun Jun 11 12:24:43 2006 -> > /var/spool/MIMEDefang/run/mdefang-k5BGOdK0022965/./Work/msg-18091-565.txt: OK > Sun Jun 11 12:24:43 2006 -> > /var/spool/MIMEDefang/run/mdefang-k5BGOdK0022965/./Work/msg-18091-566.html: OK > Sun Jun 11 12:25:02 2006 -> /tmp/.clamdwatch-GHWm2qxz6AlkrHRg: > Eicar-Test-Signature FOUND > Sun Jun 11 12:26:04 2006 -> No stats for Database check - forcing reload > Sun Jun 11 12:26:04 2006 -> Reading databases from /var/clamav/databases > Sun Jun 11 12:26:05 2006 -> /tmp/.clamdwatch-MIIaCZLkARFc2Jj2: > Eicar-Test-Signature FOUND > Sun Jun 11 12:26:16 2006 -> Segmentation fault :-( Bye.. Any ideas? What do I do to debug? THANKS! Jon Kibler -- Jon R. Kibler Chief Technical Officer A.S.E.T., Inc. Charleston, SC USA (843) 849-8214 ================================================== Filtered by: TRUSTEM.COM's Email Filtering Service http://www.trustem.com/ No Spam. No Viruses. Just Good Clean Email.
_______________________________________________ http://lurker.clamav.net/list/clamav-users.html
