At 9:34 PM +0200 3/1/09, Török Edwin wrote: >On 2009-03-01 20:43, Tom Shaw wrote: >> At 9:26 AM -0800 3/1/09, Bill Landry wrote: >> >>> Tom Shaw wrote: >>> >>>>>> What does this output: >>>>>> >>> >>> $ echo PING | strace socat - /var/tmp/clamd.socket >>> >>>>>> $ echo -ne "nPING\n" | strace socat - /var/tmp/clamd.socket >>>>>> >>> >> Edwin, >>> >>>>> OSX doesn't come with strace. I'll download a >>>>> copy from sourceforge and report back. >>>>> >>>> strace reports no support of darwin :-( Any other suggestions? >>>> >>>> Tom >>>> >>> Does darwin support "truss" (man truss)? >>> >> >> The equivalent is dtruss. >> > >Ok, can you also run clamd under dtruss? >(Perhaps with an empty database, otherwise it takes ages, set >DatabaseDirectory to /tmp/db, and >create a single file /tmp/db/empty.db: >none=00112233445566778899 > > >> pike:~ tshaw$ echo PING | sudo dtruss socat - /var/tmp/clamd.socket >> write(0x3, "PING\n\0", 0x5) = 5 0 >> select(0x4, 0xBFFFF2C8, 0xBFFFF348, 0xBFFFF3C8, 0x0) = 2 0 >> dtrace: error on enabled probe ID 1741 (ID 13125: >> syscall::read:return): invalid address (0x58000) in action #12 at DIF >> offset 52 >> shutdown(0x3, 0x1, 0x3) = 0 0 >> select(0x4, 0xBFFFF2C8, 0xBFFFF348, 0xBFFFF3C8, 0xBFFFF4DC) = 1 0 >> dtrace: error on enabled probe ID 1741 (ID 13125: >> syscall::read:return): invalid address (0x58000) in action #12 at DIF >> offset 52 >> shutdown(0x3, 0x1, 0x3) = -1 Err#57 >> ioctl(0x1, 0x802C7414, 0x800CFC) = 0 0 >> shutdown(0x3, 0x2, 0x3) = -1 Err#57 > >This is strange, so there is data available on the socket (select >returning 2, resp. 1), but >there is something wrong when socat calls read. >Does this work with netcat, if you enable TCPSocket 3310? > >P.S.: we should continue this in a bugreport, please open one.
Done #1441 Tom _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
