Hi Rich, I'll have a look at the verbose/debug output if you can send that.
Also, on which OS does this occur? Steve On Thu, May 1, 2014 at 10:12 AM, Richard Mealing <rich...@fastnet.co.uk>wrote: > Hi everyone, > > I'm running clamav with mailscanner and I'm seeing lots of problems with > clamd crashing. > > I did use some of the additional sigs from sanesecurity but I've had to > remove these as when using them, mail just doesn't get processed. The > servers are quite heavily used. > I've removed them now, but still in my logs I see this a lot - > > May 1 14:30:58 btn-mailfilter-v2 MailScanner[3271]: Cannot find Socket > (/var/run/clamav/clamd) Exiting! > May 1 14:30:58 btn-mailfilter-v2 MailScanner[3277]: Cannot find Socket > (/var/run/clamav/clamd) Exiting! > May 1 14:30:58 btn-mailfilter-v2 MailScanner[3278]: Cannot find Socket > (/var/run/clamav/clamd) Exiting! > May 1 14:30:58 btn-mailfilter-v2 MailScanner[3280]: Cannot find Socket > (/var/run/clamav/clamd) Exiting! > May 1 14:30:58 btn-mailfilter-v2 MailScanner[3284]: Cannot find Socket > (/var/run/clamav/clamd) Exiting! > May 1 14:30:59 mailfilter9 MailScanner[87503]: Cannot find Socket > (/var/run/clamav/clamd) Exiting! > May 1 14:30:59 btn-mailfilter-v2 MailScanner[3301]: Cannot find Socket > (/var/run/clamav/clamd) Exiting! > May 1 14:31:01 btn-mailfilter-v2 MailScanner[3316]: Cannot find Socket > (/var/run/clamav/clamd) Exiting! > May 1 14:31:05 btn-mailfilter-v2 MailScanner[3345]: Cannot find Socket > (/var/run/clamav/clamd) Exiting! > May 1 14:31:05 btn-mailfilter-v2 MailScanner[3353]: Cannot find Socket > (/var/run/clamav/clamd) Exiting! > May 1 14:31:06 mailfilter9 MailScanner[87553]: Cannot find Socket > (/var/run/clamav/clamd) Exiting! > May 1 14:31:07 btn-mailfilter-v2 MailScanner[3369]: Cannot find Socket > (/var/run/clamav/clamd) Exiting! > May 1 14:31:07 btn-mailfilter-v2 MailScanner[3374]: Cannot find Socket > (/var/run/clamav/clamd) Exiting! > May 1 14:31:07 btn-mailfilter-v2 MailScanner[3377]: Cannot find Socket > (/var/run/clamav/clamd) Exiting! > May 1 14:31:08 btn-mailfilter-v2 MailScanner[3383]: Cannot find Socket > (/var/run/clamav/clamd) Exiting! > May 1 14:31:11 btn-mailfilter-v2 MailScanner[3411]: Cannot find Socket > (/var/run/clamav/clamd) Exiting! > May 1 14:31:11 btn-mailfilter-v2 MailScanner[3415]: Cannot find Socket > (/var/run/clamav/clamd) Exiting! > May 1 14:31:11 btn-mailfilter-v2 MailScanner[3418]: Cannot find Socket > (/var/run/clamav/clamd) Exiting! > May 1 14:31:12 btn-mailfilter-v2 MailScanner[3430]: Cannot find Socket > (/var/run/clamav/clamd) Exiting! > May 1 14:31:12 btn-mailfilter-v2 MailScanner[3432]: Cannot find Socket > (/var/run/clamav/clamd) Exiting! > May 1 14:31:12 btn-mailfilter-v2 MailScanner[3433]: Cannot find Socket > (/var/run/clamav/clamd) Exiting! > May 1 14:31:14 btn-mailfilter-v2 MailScanner[3444]: Cannot find Socket > (/var/run/clamav/clamd) Exiting! > May 1 14:31:14 btn-mailfilter-v2 MailScanner[3447]: Cannot find Socket > (/var/run/clamav/clamd) Exiting! > May 1 14:31:14 btn-mailfilter-v2 MailScanner[3452]: Cannot find Socket > (/var/run/clamav/clamd) Exiting! > May 1 14:31:18 btn-mailfilter-v2 MailScanner[3495]: Cannot find Socket > (/var/run/clamav/clamd) Exiting! > May 1 14:31:18 btn-mailfilter-v2 MailScanner[3492]: Cannot find Socket > (/var/run/clamav/clamd) Exiting! > May 1 14:31:18 btn-mailfilter-v2 MailScanner[3493]: Cannot find Socket > (/var/run/clamav/clamd) Exiting! > May 1 14:31:21 btn-mailfilter-v2 MailScanner[3523]: Cannot find Socket > (/var/run/clamav/clamd) Exiting! > May 1 14:31:22 btn-mailfilter-v2 MailScanner[3528]: Cannot find Socket > (/var/run/clamav/clamd) Exiting! > > > The socket is set to /var/run/clamav/clamd in my mailscanner.conf file so > this is not the problem. Most of the time clamd runs happily but I see this > a lot during the day. > > I can provide clamscan -n or clamscan -debug, but I'm not sure what is > best. I've looked at a lot of different threads with some of the messages I > have seen but I can't trace where the problem might be. > > > I do see this message a lot when I verbose log - Scanthread: connection > shut down (FD 9) > > > I just built a new freebsd10 server and that doesn't seem to have the > problem, yet... I put that in the loop this morning and it seems to be > working fine. I've not loaded any third party databases yet, but ideally I > would like to use them as they obviously catch more stuff. > > Thanks, > Rich > > > > _______________________________________________ > Help us build a comprehensive ClamAV guide: > https://github.com/vrtadmin/clamav-faq > http://www.clamav.net/support/ml > _______________________________________________ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/support/ml