Hello all
On 24.10.2011 12:13, Matthew Slowe wrote:
I'm seeing a problem on a bunch of Solaris 10 SPARC servers running 0.97.x
since about 00:55 BST this morning.
Just wanted to confirm what Matthew sees.
* Also on Solaris 10 SPARC Machines
* Same Error since 01:52 MEST this Morning (which should be 00:55 BST?)
* Error occurs every 10 Minutes (SelfCheck 600)
* upgraded from 0.97.1 to 0.97.3 from scratch (with new definitions)
Since we monitor the service it get's restarted every 10min, but this
creates always a warning. So i prefer to solve the problem :-)
Here my clamconf -n
$ clamconf -n
Checking configuration files in /usr/pack/clamav-0.97.3-me/etc
Config file: clamd.conf
-----------------------
LogSyslog = "yes"
LogFacility = "LOG_MAIL"
LogVerbose = "yes"
PidFile = "/var/run/amavis/clamd.pid"
TemporaryDirectory = "/var/tmp"
LocalSocket = "/var/run/amavis/clamd.sock"
LocalSocketGroup = "amavis"
LocalSocketMode = "660"
StreamMaxLength = "262144000"
MaxThreads = "25"
ReadTimeout = "600"
User = "amavis"
BytecodeTimeout = "60000"
MaxFileSize = "31457280"
MaxRecursion = "10"
MaxFiles = "15000"
Config file: freshclam.conf
---------------------------
LogTime = "yes"
LogSyslog = "yes"
LogFacility = "LOG_MAIL"
DatabaseOwner = "local"
DatabaseMirror = "db.de.clamav.net", "database.clamav.net"
HTTPUserAgent = "clamav"
clamav-milter.conf not found
Software settings
-----------------
Version: 0.97.3
Optional features supported: MEMPOOL IPv6 AUTOIT_EA06 BZIP2 RAR
Database information
--------------------
Database directory: /usr/pack/clamav-0.97.3-me/share/clamav
[3rd Party] MSRBL-Images.hdb: 3004 sigs
main.cvd: version 54, sigs: 1044387, built on Tue Oct 11 16:34:20 2011
[3rd Party] junk.ndb: 38316 sigs
[3rd Party] MSRBL-SPAM.ndb: 2785 sigs
daily.cld: version 13843, sigs: 15910, built on Mon Oct 24 05:10:43 2011
bytecode.cvd: version 149, sigs: 39, built on Sun Oct 23 10:29:41 2011
Total number of signatures: 1104441
Platform information
--------------------
uname: solaris2.10
OS: solaris2.10, ARCH: sparc, CPU: sparc
Full OS version: Solaris 10 10/09 s10s_u8wos_08a SPARC
zlib version: 1.2.3 (1.2.3), compile flags: 55
platform id: 0x0e613f3f1400000000030403
Build information
-----------------
GNU C: 3.4.3 (csl-sol210-3_4-branch+sol_rpath) (3.4.3)
CPPFLAGS: -I/usr/pack/clamav-0.97.3-me/sun4u-sun-solaris2.10/include
CFLAGS: -O2 -I/usr/pack/clamav-0.97.3-me/include
CXXFLAGS:
LDFLAGS: -R/usr/pack/clamav-0.97.3-me/sun4u-sun-solaris2.10/lib
-L/usr/pack/clamav-0.97.3-me/sun4u-sun-solaris2.10/lib
Configure:
'--exec-prefix=/usr/pack/clamav-0.97.3-me/sun4u-sun-solaris2.10'
'--prefix=/usr/pack/clamav-0.97.3-me' '--disable-clamav'
'--disable-static' 'CC=gcc' 'CFLAGS=-O2
-I/usr/pack/clamav-0.97.3-me/include'
'LDFLAGS=-R/usr/pack/clamav-0.97.3-me/sun4u-sun-solaris2.10/lib
-L/usr/pack/clamav-0.97.3-me/sun4u-sun-solaris2.10/lib'
--enable-ltdl-convenience
sizeof(void*) = 4
Engine flevel: 63, dconf: 63
And here the relevant part from the logfile:
Oct 24 13:44:15 tardis clamd[18579]: [ID 702911 mail.info] No stats for
Database check - forcing reload
Oct 24 13:44:16 tardis clamd[18579]: [ID 702911 mail.info] Reading
databases from /usr/pack/clamav-0.97.3-me/share/clamav
Oct 24 13:44:30 tardis clamd[18579]: [ID 702911 mail.error] Database
initialization error: can't compile engine: Failure in bytecode testmode
Oct 24 13:44:30 tardis clamd[18579]: [ID 702911 mail.info] Terminating
because of a fatal error.
Oct 24 13:44:30 tardis clamd[18579]: [ID 702911 mail.debug] Waiting for
all threads to finish
Oct 24 13:44:30 tardis clamd[18579]: [ID 702911 mail.debug] Shutting
down the main socket.
Oct 24 13:44:30 tardis clamd[18579]: [ID 702911 mail.info] Pid file removed.
Oct 24 13:44:30 tardis clamd[18579]: [ID 702911 mail.info] --- Stopped
at Mon Oct 24 13:44:30 2011
Oct 24 13:44:30 tardis clamd[18579]: [ID 702911 mail.debug] Closing the
main socket.
Oct 24 13:44:30 tardis clamd[18579]: [ID 702911 mail.info] Socket file
removed.
Oct 24 13:45:02 tardis clamd[22637]: [ID 702911 mail.info] clamd daemon
0.97.3 (OS: solaris2.10, ARCH: sparc, CPU: sparc)
Oct 24 13:45:02 tardis clamd[22637]: [ID 702911 mail.info] Running as
user amavis (UID 65403, GID 65403)
Oct 24 13:45:02 tardis clamd[22637]: [ID 702911 mail.info] Log file size
limited to 1048576 bytes.
Oct 24 13:45:02 tardis clamd[22637]: [ID 702911 mail.info] Reading
databases from /usr/pack/clamav-0.97.3-me/share/clamav
Oct 24 13:45:02 tardis clamd[22637]: [ID 702911 mail.info] Not loading
PUA signatures.
Oct 24 13:45:02 tardis clamd[22637]: [ID 702911 mail.info] Bytecode:
Security mode set to "TrustSigned".
Oct 24 13:45:19 tardis clamd[22637]: [ID 702911 mail.info] LOCAL: Unix
socket file /var/run/amavis/clamd.sock
Oct 24 13:45:19 tardis clamd[22637]: [ID 702911 mail.info] LOCAL:
Setting connection queue length to 200
Oct 24 13:45:19 tardis clamd[22897]: [ID 702911 mail.info] Limits:
Global size limit set to 104857600 bytes.
Oct 24 13:45:19 tardis clamd[22897]: [ID 702911 mail.info] Limits: File
size limit set to 31457280 bytes.
Oct 24 13:45:19 tardis clamd[22897]: [ID 702911 mail.info] Limits:
Recursion level limit set to 10.
Oct 24 13:45:19 tardis clamd[22897]: [ID 702911 mail.info] Limits: Files
limit set to 15000.
Oct 24 13:45:19 tardis clamd[22897]: [ID 702911 mail.debug] Limits:
Core-dump limit is 0.
Oct 24 13:45:19 tardis clamd[22897]: [ID 702911 mail.info] Archive
support enabled.
Oct 24 13:45:19 tardis clamd[22897]: [ID 702911 mail.info] Algorithmic
detection enabled.
Oct 24 13:45:19 tardis clamd[22897]: [ID 702911 mail.info] Portable
Executable support enabled.
Oct 24 13:45:19 tardis clamd[22897]: [ID 702911 mail.info] ELF support
enabled.
Oct 24 13:45:19 tardis clamd[22897]: [ID 702911 mail.info] Mail files
support enabled.
Oct 24 13:45:19 tardis clamd[22897]: [ID 702911 mail.info] OLE2 support
enabled.
Oct 24 13:45:19 tardis clamd[22897]: [ID 702911 mail.info] PDF support
enabled.
Oct 24 13:45:19 tardis clamd[22897]: [ID 702911 mail.info] HTML support
enabled.
Oct 24 13:45:19 tardis clamd[22897]: [ID 702911 mail.info] Self checking
every 600 seconds.
Oct 24 13:45:19 tardis clamd[22897]: [ID 702911 mail.debug] Listening
daemon: PID: 22897
Oct 24 13:45:19 tardis clamd[22897]: [ID 702911 mail.debug] MaxQueue set
to: 25
Best Regards
Matthias Egger
--
Matthias Egger
ETH Zurich
Department of Information Technology maeg...@ee.ethz.ch
and Electrical Engineering
IT Support Group (ISG.EE), ETL/F/24.1 Phone +41 (0)44 632 03 90
Physikstrasse 3, CH-8092 Zurich Fax +41 (0)44 632 11 95
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml
