Hey folks,
Yesterday's yum update to the latest version of ClamAV on my
mailserver doesn't seem to be doing real great for me... clamd
is dying every now and again (I don't know that it's lasted more
than a few hours so far):
clone(Process 20592 attached
child_stack=0x40f56250,
flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID,
parent_tidptr=0x40f569d0, tls=0x40f56940, child_tidptr=0x40f569d0) = 20592
[pid 19320] poll( <unfinished ...>
[pid 20592] set_robust_list(0x40f569e0, 0x18) = 0
[pid 20592] rt_sigprocmask(SIG_SETMASK, ~[ILL BUS FPE SEGV RTMIN RT_1],
NULL, 8) = 0
[pid 20592] poll([{fd=7, events=POLLIN, revents=POLLIN}], 1, 300000) = 1
[pid 20592] recvfrom(7, "PING", 1024, MSG_PEEK, NULL, NULL) = 4
[pid 20592] recvfrom(7, "PING", 1024, 0, NULL, NULL) = 4
[pid 20592] sendto(7, "PONG\n", 5, 0, NULL, 0) = 5
[pid 20592] shutdown(7, 2 /* send and receive */) = 0
[pid 20592] close(7) = 0
[pid 20592] clock_gettime(CLOCK_REALTIME, {1215698173, 143555000}) = 0
[pid 20592] futex(0x1b3ec8ac, FUTEX_WAIT, 15, {29, 856445000}) = -1
ETIMEDOUT (Connection timed out)
[pid 20592] futex(0x1b3ec880, FUTEX_WAKE, 1) = 0
[pid 20592] _exit(0) = ?
Process 20592 detached
<... poll resumed> [{fd=5, events=POLLIN, revents=POLLIN}, {fd=6,
events=POLLIN}], 2, -1) = 1
fstat(5, {st_mode=S_IFSOCK|0777, st_size=0, ...}) = 0
accept(5, 0, NULL) = 7
clone(Process 20745 attached
child_stack=0x40f56250,
flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID,
parent_tidptr=0x40f569d0, tls=0x40f56940, child_tidptr=0x40f569d0) = 20745
[pid 19320] poll( <unfinished ...>
[pid 20745] set_robust_list(0x40f569e0, 0x18) = 0
[pid 20745] rt_sigprocmask(SIG_SETMASK, ~[ILL BUS FPE SEGV RTMIN RT_1],
NULL, 8) = 0
[pid 20745] poll([{fd=7, events=POLLIN, revents=POLLIN}], 1, 300000) = 1
[pid 20745] recvfrom(7, "PING", 1024, MSG_PEEK, NULL, NULL) = 4
[pid 20745] recvfrom(7, "PING", 1024, 0, NULL, NULL) = 4
[pid 20745] sendto(7, "PONG\n", 5, 0, NULL, 0) = 5
[pid 20745] shutdown(7, 2 /* send and receive */) = 0
[pid 20745] close(7) = 0
[pid 20745] clock_gettime(CLOCK_REALTIME, {1215698353, 203799000}) = 0
[pid 20745] futex(0x1b3ec8ac, FUTEX_WAIT, 17, {29, 796201000}) = -1
ETIMEDOUT (Connection timed out)
[pid 20745] futex(0x1b3ec880, FUTEX_WAKE, 1) = 0
[pid 20745] _exit(0) = ?
Process 20745 detached
<... poll resumed> [{fd=5, events=POLLIN, revents=POLLIN}, {fd=6,
events=POLLIN}], 2, -1) = 1
fstat(5, {st_mode=S_IFSOCK|0777, st_size=0, ...}) = 0
accept(5, 0, NULL) = 7
clone(Process 20922 attached
child_stack=0x40f56250,
flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID,
parent_tidptr=0x40f569d0, tls=0x40f56940, child_tidptr=0x40f569d0) = 20922
[pid 19320] poll( <unfinished ...>
[pid 20922] set_robust_list(0x40f569e0, 0x18) = 0
[pid 20922] rt_sigprocmask(SIG_SETMASK, ~[ILL BUS FPE SEGV RTMIN RT_1],
NULL, 8) = 0
[pid 20922] poll([{fd=7, events=POLLIN, revents=POLLIN}], 1, 300000) = 1
[pid 20922] recvfrom(7, "PING", 1024, MSG_PEEK, NULL, NULL) = 4
[pid 20922] recvfrom(7, "PING", 1024, 0, NULL, NULL) = 4
[pid 20922] sendto(7, "PONG\n", 5, 0, NULL, 0) = 5
[pid 20922] shutdown(7, 2 /* send and receive */) = 0
[pid 20922] close(7) = 0
[pid 20922] clock_gettime(CLOCK_REALTIME, {1215698533, 79357000}) = 0
[pid 20922] futex(0x1b3ec8ac, FUTEX_WAIT, 19, {29, 920643000}) = -1
ETIMEDOUT (Connection timed out)
[pid 20922] futex(0x1b3ec880, FUTEX_WAKE, 1) = 0
[pid 20922] _exit(0) = ?
Process 20922 detached
<... poll resumed> [{fd=5, events=POLLIN, revents=POLLIN}, {fd=6,
events=POLLIN}], 2, -1) = 1
fstat(5, {st_mode=S_IFSOCK|0777, st_size=0, ...}) = 0
accept(5, 0, NULL) = 7
clone(Process 21100 attached
child_stack=0x40f56250,
flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID,
parent_tidptr=0x40f569d0, tls=0x40f56940, child_tidptr=0x40f569d0) = 21100
[pid 19320] write(3, "Thu Jul 10 09:05:13 2008 -> No s"..., 73) = 73
[pid 19320] stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=3543,
...}) = 0
[pid 19320] stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=3543,
...}) = 0
[pid 19320] stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=3543,
...}) = 0
[pid 19320] sendto(4, "<182>Jul 10 09:05:13 clamd[19320"..., 80,
MSG_NOSIGNAL, NULL, 0) = 80
[pid 19320] write(1, "No stats for Database check - fo"..., 45) = 45
[pid 19320] write(3, "Thu Jul 10 09:05:13 2008 -> Read"..., 63) = 63
[pid 19320] stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=3543,
...}) = 0
[pid 19320] stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=3543,
...}) = 0
[pid 19320] stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=3543,
...}) = 0
[pid 19320] sendto(4, "<182>Jul 10 09:05:13 clamd[19320"..., 70,
MSG_NOSIGNAL, NULL, 0) = 70
[pid 19320] write(1, "Reading databases from /var/clam"..., 35) = 35
[pid 19320] open("/var/clamav", O_RDONLY|O_NONBLOCK|O_DIRECTORY) = 8
[pid 19320] fstat(8, {st_mode=S_IFDIR|0755, st_size=4096, ...}) = 0
[pid 19320] fcntl(8, F_SETFD, FD_CLOEXEC) = 0
[pid 19320] getdents(8, /* 6 entries */, 4096) = 176
[pid 19320] stat("/var/clamav/main.cvd", {st_mode=S_IFREG|0644,
st_size=15200793, ...}) = 0
[pid 19320] stat("/var/clamav/daily.cld", {st_mode=S_IFREG|0644,
st_size=2258944, ...}) = 0
[pid 19320] getdents(8, /* 0 entries */, 4096) = 0
[pid 19320] close(8) = 0
[pid 19320] stat("/var/clamav", {st_mode=S_IFDIR|0755, st_size=4096, ...})
= 0
[pid 21100] set_robust_list(0x40f569e0, 0x18) = 0
[pid 21100] rt_sigprocmask(SIG_SETMASK, ~[ILL BUS FPE SEGV RTMIN RT_1],
NULL, 8) = 0
[pid 21100] poll([{fd=7, events=POLLIN, revents=POLLIN}], 1, 300000) = 1
[pid 21100] recvfrom(7, "PING", 1024, MSG_PEEK, NULL, NULL) = 4
[pid 21100] recvfrom(7, "PING", 1024, 0, NULL, NULL) = 4
[pid 21100] sendto(7, "PONG\n", 5, 0, NULL, 0) = 5
[pid 21100] shutdown(7, 2 /* send and receive */) = 0
[pid 21100] close(7 <unfinished ...>
[pid 19320] access("/var/clamav/local.ign", R_OK <unfinished ...>
[pid 21100] <... close resumed> ) = 0
[pid 19320] <... access resumed> ) = -1 ENOENT (No such file or
directory)
[pid 19320] access("/var/clamav/daily.cld", R_OK) = 0
[pid 19320] access("/var/clamav/daily.cld", R_OK) = 0
[pid 19320] mmap(NULL, 134217728, PROT_NONE,
MAP_PRIVATE|MAP_ANONYMOUS|MAP_NORESERVE, -1, 0) = 0x2aaaaaaab000
[pid 19320] munmap(0x2aaaaaaab000, 22368256) = 0
[pid 19320] munmap(0x2aaab0000000, 44740608) = 0
[pid 19320] mprotect(0x2aaaac000000, 135168, PROT_READ|PROT_WRITE) = 0
[pid 19320] open("/var/clamav/daily.cld", O_RDONLY) = 7
[pid 19320] fstat(7, {st_mode=S_IFREG|0644, st_size=2258944, ...}) = 0
[pid 19320] mmap(NULL, 4096, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x2aaab0000000
[pid 19320] lseek(7, 0, SEEK_SET) = 0
[pid 19320] read(7, "ClamAV-VDB:10 Jul 2008 11-26 +00"..., 4096) = 4096
[pid 19320] lseek(7, 512, SEEK_SET) = 512
[pid 19320] lseek(7, 512, SEEK_SET) = 512
[pid 19320] read(7, "COPYING", 7) = 7
[pid 19320] lseek(7, 512, SEEK_SET) = 512
[pid 19320] dup(7) = 8
[pid 19320] fcntl(8, F_GETFL) = 0x8000 (flags O_RDONLY|O_LARGEFILE)
[pid 19320] fstat(8, {st_mode=S_IFREG|0644, st_size=2258944, ...}) = 0
[pid 19320] mmap(NULL, 4096, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x2aaab0001000
[pid 19320] lseek(8, 0, SEEK_CUR) = 512
[pid 19320] read(8,
"COPYING\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 4096) =
4096
[pid 19320] lseek(8, 16384, SEEK_SET) = 16384
[pid 19320] read(8, "tribute and change under these t"..., 4096) = 4096
[pid 19320] --- SIGSEGV (Segmentation fault) @ 0 (0) ---
Process 19320 detached
[pid 21100] +++ killed by SIGSEGV +++
Process 19320 detached
I'm using the RPM repository at rpmforge; is anyone else having
problems on the same platform? It's really killing me, to the point
of creating a Nagios event handler to restart it automatically for
me.
The versions are:
clamav-milter-0.93.2-1.el5.rf
clamav-db-0.93.2-1.el5.rf
clamav-0.93.2-1.el5.rf
clamd-0.93.2-1.el5.rf
I understand this may be a packaging issue, so I can try to
contact the folks over at rpmforge, but I thought I'd ask here
first in case someone else had the same issue.
I'd love any pointers/tips - I can downgrade if I have to, but
I'd like to avoid doing the 'rpm -e .. rpm -i' dance if I can. Also,
I'd like to figure out why if possible, in case it might be a bug.
Thanks much!
Benny
--
"If I could drop dead right now, I'd be the happiest
man alive!" --Samuel Goldwyn
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml
