Hi everyone,

I'm running clamav with mailscanner and I'm seeing lots of problems with clamd 
crashing.

I did use some of the additional sigs from sanesecurity but I've had to remove 
these as when using them, mail just doesn't get processed. The servers are 
quite heavily used.
I've removed them now, but still in my logs I see this a lot -

May  1 14:30:58 btn-mailfilter-v2 MailScanner[3271]: Cannot find Socket 
(/var/run/clamav/clamd) Exiting!
May  1 14:30:58 btn-mailfilter-v2 MailScanner[3277]: Cannot find Socket 
(/var/run/clamav/clamd) Exiting!
May  1 14:30:58 btn-mailfilter-v2 MailScanner[3278]: Cannot find Socket 
(/var/run/clamav/clamd) Exiting!
May  1 14:30:58 btn-mailfilter-v2 MailScanner[3280]: Cannot find Socket 
(/var/run/clamav/clamd) Exiting!
May  1 14:30:58 btn-mailfilter-v2 MailScanner[3284]: Cannot find Socket 
(/var/run/clamav/clamd) Exiting!
May  1 14:30:59 mailfilter9 MailScanner[87503]: Cannot find Socket 
(/var/run/clamav/clamd) Exiting!
May  1 14:30:59 btn-mailfilter-v2 MailScanner[3301]: Cannot find Socket 
(/var/run/clamav/clamd) Exiting!
May  1 14:31:01 btn-mailfilter-v2 MailScanner[3316]: Cannot find Socket 
(/var/run/clamav/clamd) Exiting!
May  1 14:31:05 btn-mailfilter-v2 MailScanner[3345]: Cannot find Socket 
(/var/run/clamav/clamd) Exiting!
May  1 14:31:05 btn-mailfilter-v2 MailScanner[3353]: Cannot find Socket 
(/var/run/clamav/clamd) Exiting!
May  1 14:31:06 mailfilter9 MailScanner[87553]: Cannot find Socket 
(/var/run/clamav/clamd) Exiting!
May  1 14:31:07 btn-mailfilter-v2 MailScanner[3369]: Cannot find Socket 
(/var/run/clamav/clamd) Exiting!
May  1 14:31:07 btn-mailfilter-v2 MailScanner[3374]: Cannot find Socket 
(/var/run/clamav/clamd) Exiting!
May  1 14:31:07 btn-mailfilter-v2 MailScanner[3377]: Cannot find Socket 
(/var/run/clamav/clamd) Exiting!
May  1 14:31:08 btn-mailfilter-v2 MailScanner[3383]: Cannot find Socket 
(/var/run/clamav/clamd) Exiting!
May  1 14:31:11 btn-mailfilter-v2 MailScanner[3411]: Cannot find Socket 
(/var/run/clamav/clamd) Exiting!
May  1 14:31:11 btn-mailfilter-v2 MailScanner[3415]: Cannot find Socket 
(/var/run/clamav/clamd) Exiting!
May  1 14:31:11 btn-mailfilter-v2 MailScanner[3418]: Cannot find Socket 
(/var/run/clamav/clamd) Exiting!
May  1 14:31:12 btn-mailfilter-v2 MailScanner[3430]: Cannot find Socket 
(/var/run/clamav/clamd) Exiting!
May  1 14:31:12 btn-mailfilter-v2 MailScanner[3432]: Cannot find Socket 
(/var/run/clamav/clamd) Exiting!
May  1 14:31:12 btn-mailfilter-v2 MailScanner[3433]: Cannot find Socket 
(/var/run/clamav/clamd) Exiting!
May  1 14:31:14 btn-mailfilter-v2 MailScanner[3444]: Cannot find Socket 
(/var/run/clamav/clamd) Exiting!
May  1 14:31:14 btn-mailfilter-v2 MailScanner[3447]: Cannot find Socket 
(/var/run/clamav/clamd) Exiting!
May  1 14:31:14 btn-mailfilter-v2 MailScanner[3452]: Cannot find Socket 
(/var/run/clamav/clamd) Exiting!
May  1 14:31:18 btn-mailfilter-v2 MailScanner[3495]: Cannot find Socket 
(/var/run/clamav/clamd) Exiting!
May  1 14:31:18 btn-mailfilter-v2 MailScanner[3492]: Cannot find Socket 
(/var/run/clamav/clamd) Exiting!
May  1 14:31:18 btn-mailfilter-v2 MailScanner[3493]: Cannot find Socket 
(/var/run/clamav/clamd) Exiting!
May  1 14:31:21 btn-mailfilter-v2 MailScanner[3523]: Cannot find Socket 
(/var/run/clamav/clamd) Exiting!
May  1 14:31:22 btn-mailfilter-v2 MailScanner[3528]: Cannot find Socket 
(/var/run/clamav/clamd) Exiting!


The socket is set to /var/run/clamav/clamd in my mailscanner.conf file so this 
is not the problem. Most of the time clamd runs happily but I see this a lot 
during the day.

I can provide clamscan -n or clamscan -debug, but I'm not sure what is best. 
I've looked at a lot of different threads with some of the messages I have seen 
but I can't trace where the problem might be.


I do see this message a lot when I verbose log - Scanthread: connection shut 
down (FD 9)


I just built a new freebsd10 server and that doesn't seem to have the problem, 
yet... I put that in the loop this morning and it seems to be working fine. 
I've not loaded any third party databases yet, but ideally I would like to use 
them as they obviously catch more stuff.

Thanks,
Rich



_______________________________________________
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq
http://www.clamav.net/support/ml

Reply via email to