I'm seeing some strange behavior in the latest svn, where clamd stops detecting certain structured data test files after the daemon has been running for about 10 minutes. (See syslog sample below.) Not sure if this is specific to structured data or not. Anyone else seeing anything similar. Is there a potential config issue, or should I open a bug? -tm
Feb 6 10:13:16 mailclientdev clamd[9012]: clamd daemon devel-r4680 (OS: linux-gnu, ARCH: i386, CPU: i686) Feb 6 10:13:16 mailclientdev clamd[9012]: Running as user clamav (UID 100, GID 101) Feb 6 10:13:16 mailclientdev clamd[9012]: Log file size limit disabled. Feb 6 10:13:16 mailclientdev clamd[9012]: Reading databases from /var/clamav Feb 6 10:13:16 mailclientdev clamd[9012]: Not loading PUA signatures. Feb 6 10:13:21 mailclientdev clamd[9012]: Loaded 513108 signatures. Feb 6 10:13:21 mailclientdev clamd[9012]: LOCAL: Unix socket file /var/run/clamav/clamd.socket Feb 6 10:13:21 mailclientdev clamd[9012]: LOCAL: Setting connection queue length to 30 Feb 6 10:13:21 mailclientdev clamd[9014]: Limits: Global size limit set to 104857600 bytes. Feb 6 10:13:21 mailclientdev clamd[9014]: Limits: File size limit set to 26214400 bytes. Feb 6 10:13:21 mailclientdev clamd[9014]: Limits: Recursion level limit set to 16. Feb 6 10:13:21 mailclientdev clamd[9014]: Limits: Files limit set to 10000. Feb 6 10:13:21 mailclientdev clamd[9014]: Archive support enabled. Feb 6 10:13:21 mailclientdev clamd[9014]: Algorithmic detection enabled. Feb 6 10:13:21 mailclientdev clamd[9014]: Portable Executable support enabled. Feb 6 10:13:21 mailclientdev clamd[9014]: ELF support enabled. Feb 6 10:13:21 mailclientdev clamd[9014]: Detection of broken executables enabled. Feb 6 10:13:21 mailclientdev clamd[9014]: Mail files support enabled. Feb 6 10:13:21 mailclientdev clamd[9014]: OLE2 support enabled. Feb 6 10:13:21 mailclientdev clamd[9014]: PDF support enabled. Feb 6 10:13:21 mailclientdev clamd[9014]: HTML support enabled. Feb 6 10:13:21 mailclientdev clamd[9014]: Structured: Minimum Credit Card Number Count set to 1 Feb 6 10:13:21 mailclientdev clamd[9014]: Structured: Minimum Social Security Number Count set to 1 Feb 6 10:13:21 mailclientdev clamd[9014]: Self checking every 600 seconds. Feb 6 10:13:21 mailclientdev clamd[9014]: Listening daemon: PID: 9014 Feb 6 10:13:21 mailclientdev clamd[9014]: /opt/filter_tests/ssn-123-45-6789.txt: Structured.SSN FOUND Feb 6 10:13:21 mailclientdev clamd[9014]: /opt/filter_tests/ssn.txt: Structured.SSN FOUND Feb 6 10:14:21 mailclientdev clamd[9014]: /opt/filter_tests/ssn-123-45-6789.txt: Structured.SSN FOUND Feb 6 10:14:21 mailclientdev clamd[9014]: /opt/filter_tests/ssn.txt: Structured.SSN FOUND Feb 6 10:15:21 mailclientdev clamd[9014]: /opt/filter_tests/ssn-123-45-6789.txt: Structured.SSN FOUND Feb 6 10:15:21 mailclientdev clamd[9014]: /opt/filter_tests/ssn.txt: Structured.SSN FOUND Feb 6 10:16:21 mailclientdev clamd[9014]: /opt/filter_tests/ssn-123-45-6789.txt: Structured.SSN FOUND Feb 6 10:16:21 mailclientdev clamd[9014]: /opt/filter_tests/ssn.txt: Structured.SSN FOUND Feb 6 10:17:21 mailclientdev clamd[9014]: /opt/filter_tests/ssn-123-45-6789.txt: Structured.SSN FOUND Feb 6 10:17:21 mailclientdev clamd[9014]: /opt/filter_tests/ssn.txt: Structured.SSN FOUND Feb 6 10:18:21 mailclientdev clamd[9014]: /opt/filter_tests/ssn-123-45-6789.txt: Structured.SSN FOUND Feb 6 10:18:21 mailclientdev clamd[9014]: /opt/filter_tests/ssn.txt: Structured.SSN FOUND Feb 6 10:19:21 mailclientdev clamd[9014]: /opt/filter_tests/ssn-123-45-6789.txt: Structured.SSN FOUND Feb 6 10:19:21 mailclientdev clamd[9014]: /opt/filter_tests/ssn.txt: Structured.SSN FOUND Feb 6 10:20:21 mailclientdev clamd[9014]: /opt/filter_tests/ssn-123-45-6789.txt: Structured.SSN FOUND Feb 6 10:20:21 mailclientdev clamd[9014]: /opt/filter_tests/ssn.txt: Structured.SSN FOUND Feb 6 10:21:21 mailclientdev clamd[9014]: /opt/filter_tests/ssn-123-45-6789.txt: Structured.SSN FOUND Feb 6 10:21:21 mailclientdev clamd[9014]: /opt/filter_tests/ssn.txt: Structured.SSN FOUND Feb 6 10:22:21 mailclientdev clamd[9014]: /opt/filter_tests/ssn-123-45-6789.txt: Structured.SSN FOUND Feb 6 10:22:21 mailclientdev clamd[9014]: /opt/filter_tests/ssn.txt: Structured.SSN FOUND Feb 6 10:23:21 mailclientdev clamd[9014]: /opt/filter_tests/ssn-123-45-6789.txt: Structured.SSN FOUND Feb 6 10:23:21 mailclientdev clamd[9014]: /opt/filter_tests/ssn.txt: Structured.SSN FOUND Feb 6 10:24:21 mailclientdev clamd[9014]: No stats for Database check - forcing reload Feb 6 10:24:21 mailclientdev clamd[9014]: Reading databases from /var/clamav Feb 6 10:24:21 mailclientdev clamd[9014]: /opt/filter_tests/ssn-123-45-6789.txt: Structured.SSN FOUND Feb 6 10:24:27 mailclientdev clamd[9014]: Database correctly reloaded (513108 signatures) Feb 6 10:24:27 mailclientdev clamd[9014]: /opt/filter_tests/ssn.txt: Structured.SSN FOUND Feb 6 10:25:27 mailclientdev clamd[9014]: /opt/filter_tests/ssn-123-45-6789.txt: OK _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
