2012/6/7 G.W. Haywood <g...@jubileegroup.co.uk>: > Hi there, > > > On Thu, 7 Jun 2012, c0re wrote: > >> In clamav-milter logs I see only this: >> >> Jun 7 12:37:08 avsrv clamav-milter[29989]: clamfi_eom: FD send >> failed: Broken pipe >> Jun 7 12:37:08 avsrv clamav-milter[29989]: FD send failed >> >> So what's happening here? > > > I don't know. :) The exact architecture isn't clear to me, and you > could have supplied a lot more information. > > >> If I restart clamav-milter it takes about 40 minutes to get 1st errors >> like above. > > > The symptoms hint that you're running out of some resource. It could > be as simple as running out of RAM on the scanning machine. > > My approach would be to use tools like top, lsof, ntop and Wireshark > to look at the processes on the servers, the resources in use and the > traffic between the servers. > > -- > > 73, > Ged. > _______________________________________________ > Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net > http://www.clamav.net/support/ml
Hi! Architecture is pretty simple: 1st server with clamd, clamav-milter. 2nd server with sendmail. Sendmail configured to use clamav: MC conf: INPUT_MAIL_FILTER(`clmilter',`S=inet:3434@1.2.3.4,F=, T=C:5s;S:20s;R:20s;E:10m')dnl define(`confINPUT_MAIL_FILTERS', `spamassassin, clmilter, othersecretmilter')dnl So when email arrives to sendmail, it checks via spamassassin local socket, then send via inet to clamav-milter, then to other milters in a row. There is no memory problems: Mem: 350M Active, 2235M Inact, 466M Wired, 417M Buf, 880M Free Swap: 4096M Total, 4096M Free No CPU problems: load averages: 0.06, 0.04, 0.06 CPU 0: 7.1% user, 0.0% nice, 1.1% system, 0.0% interrupt, 91.8% idle CPU 1: 6.7% user, 0.0% nice, 0.4% system, 0.0% interrupt, 92.9% idle Will try to monitor with other tools.. Thanks for your reply. _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
