We use clamAV 0.88.5 on Solaris 9, bound to a TCP port and integrated
with Exim, to scan our incoming email. It's been running happily for the
last month or so, but last night it broke:
Oct 30 20:33:05 spam2 clamd[1291]: [ID 702911 local6.debug] Accepted
connection on port 6263, fd 8
Oct 30 20:33:05 spam2 clamd[1291]: [ID 702911 local6.info] stream:
Unable to open file or directory ERROR
It reported this error for every file it was asked to scan between 20:30
- almost immediately after reloading the databases, which clam claimed
to have done sucessfully - until the next attempt to reload, at 02:30,
which fails:
Oct 31 02:33:01 spam2 clamd[1291]: [ID 702911 local6.error] reload db
failed: CVD extraction failure
...at which point the daemon quit. When I restarted it, it restarted
cleanly and hasn't shown any sign of problems since. Freshclam was still
running, but the database hadn't been updated whilst clamd was stopped
so I don't think the database was corrupted.
The problem didn't affect the spamassassin instance on the same host, so
it's not likely to be caused by exhausting system resources, and it's
not caused by a full /tmp filesystem or swap as we have lots of both. It
also didn't affect the other (identical) scanning system. Clamd is
signalled to reload with "echo 'RELOAD' | nc localhost 3310"
Any ideas as to what caused this and what to do about it would be
appreciated...
cheers,
Adam.
--------------------------------
Adam Stephens
Network Specialist - Email & DNS
[EMAIL PROTECTED]
_______________________________________________
http://lurker.clamav.net/list/clamav-users.html
