jean-paul natola wrote:
Hi everyone,
Hello.
I'm having a bit of a problem with clamav on my server-
I'm getting about 3 to 4 of these per hour- and I dont know why its
happening
"malware acl condition: clamd: unable to read from socket (Operation
timed out)"
and yes mail is still coming in- and clamd is running
Start by describing your problem in detail: complete list of software and
versions involved, where are those messages appearing, what does clamd log
say,
what have you already tried to detect/eliminate the problem, and anything
else
you consider relevant.
I'm running;
Freebsd 5.4 clamav 88.7 SA 3.1.7
In the paniclog /var/log/exim/paniclog is where I 'm seeing these entries
I did check the 'messages' log and there are no entries-
It seems that clamav is timing out when it is attempting to scan large
messages
yesterday I saw clams cpu and mem start to skyrocket, at that moment i
looked at what message was being scanned and it was an 18meg file which
subsequently caused another timeout error
My hardware is the following-
550 mhz pentium 320 megs or ram
and here are my disk stats-
/dev/ad0s1a 248M 86M 142M 38% /
devfs 1.0K 1.0K 0B 100% /dev
/dev/ad0s1e 248M 86K 228M 0% /tmp
/dev/ad0s1f 4.9G 792M 3.7G 17% /usr
/dev/ad0s1d 248M 137M 91M 60% /var
I will now look for- and examine the clam log
someone suggested to tell exim not to call clam on large messages (over 5
megs for example)
as virus are always small to spread quicker -
_________________________________________________________________
Share your latest news with your friends with the Windows Live Spaces
friends module.
http://clk.atdmt.com/MSN/go/msnnkwsp0070000001msn/direct/01/?href=http://spaces.live.com/spacesapi.aspx?wx_action=create&wx_url=/friends.aspx&mk
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html
