Hi, I have clamd daemon 0.97.6 (OS: linux-gnu, ARCH: i386, CPU: i486), nginx as webserver and php front-end for files upload. When ZIP archive file more than ~50Mb is being uloaded, Clamav gives an error "ERROR: INSTREAM: Can't write to temporary file." All possible limits were increased:
*** Limits: Global size limit set to 1048576000 bytes. Limits: File size limit set to 262144000 bytes. *** clamd is running as user root (UID 0, GID 0), permissions to custom temporary folder for files is set to drwxrwxrwx, Google/stackoverflow were explored. Here's full clamd debug information: **** +++ Started at Sun Jan 20 06:43:22 2013 clamd daemon 0.97.6 (OS: linux-gnu, ARCH: i386, CPU: i486) Running as user root (UID 0, GID 0) Log file size limited to -1 bytes. Reading databases from /var/lib/clamav Not loading PUA signatures. Bytecode: Security mode set to "TrustSigned". Loaded 1632102 signatures. TCP: Bound to port 3310 TCP: Setting connection queue length to 45 Limits: Global size limit set to 1048576000 bytes. Limits: File size limit set to 262144000 bytes. WARNING: System limit for file size is lower than engine->maxfilesize WARNING: System limit for file size is lower than engine->maxscansize Limits: Recursion level limit set to 16. Limits: Files limit set to 10000. Limits: Core-dump limit is 0. Archive support enabled. Algorithmic detection enabled. Portable Executable support enabled. ELF support enabled. Detection of broken executables enabled. Mail files support disabled. OLE2 support enabled. PDF support enabled. HTML support enabled. Self checking every 3600 seconds. Listening daemon: PID: 11325 MaxQueue set to: 100 fds_poll_recv: timeout after 3600 seconds Received POLLIN|POLLHUP on fd 5 Got new connection, FD 10 Received POLLIN|POLLHUP on fd 6 fds_poll_recv: timeout after 50 seconds Received POLLIN|POLLHUP on fd 10 got command INSTREAM (9, 14), argument: Receive thread: INSTREAM: /clamav-tmp/clamav-8562bac6363939841a94b960e1a168df fd 11 Breaking command loop, mode is no longer MODE_COMMAND Moved partial command: 4094 mode == MODE_STREAM Got chunksize: 103826982 Quota: 4191140313 Processed 4090 bytes of chunkdata Received POLLIN|POLLHUP on fd 10 Moved partial command: 4104 mode == MODE_STREAM + around 51000 strings of this block: processed 4104 bytes of chunkdata Received POLLIN|POLLHUP on fd 10 Moved partial command: 4104 mode == MODE_STREAM And finally: ERROR: INSTREAM: Can't write to temporary file. Processed 4104 bytes of chunkdata Shutting down socket after error (FD 10) Number of file descriptors polled: 1 fds fds_poll_recv: timeout after 3600 seconds **** Please help! Thank you. _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
