Hi Rich,

I'll have a look at the verbose/debug output if you can send that.

Also, on which OS does this occur?

Steve


On Thu, May 1, 2014 at 10:12 AM, Richard Mealing <rich...@fastnet.co.uk>wrote:

> Hi everyone,
>
> I'm running clamav with mailscanner and I'm seeing lots of problems with
> clamd crashing.
>
> I did use some of the additional sigs from sanesecurity but I've had to
> remove these as when using them, mail just doesn't get processed. The
> servers are quite heavily used.
> I've removed them now, but still in my logs I see this a lot -
>
> May  1 14:30:58 btn-mailfilter-v2 MailScanner[3271]: Cannot find Socket
> (/var/run/clamav/clamd) Exiting!
> May  1 14:30:58 btn-mailfilter-v2 MailScanner[3277]: Cannot find Socket
> (/var/run/clamav/clamd) Exiting!
> May  1 14:30:58 btn-mailfilter-v2 MailScanner[3278]: Cannot find Socket
> (/var/run/clamav/clamd) Exiting!
> May  1 14:30:58 btn-mailfilter-v2 MailScanner[3280]: Cannot find Socket
> (/var/run/clamav/clamd) Exiting!
> May  1 14:30:58 btn-mailfilter-v2 MailScanner[3284]: Cannot find Socket
> (/var/run/clamav/clamd) Exiting!
> May  1 14:30:59 mailfilter9 MailScanner[87503]: Cannot find Socket
> (/var/run/clamav/clamd) Exiting!
> May  1 14:30:59 btn-mailfilter-v2 MailScanner[3301]: Cannot find Socket
> (/var/run/clamav/clamd) Exiting!
> May  1 14:31:01 btn-mailfilter-v2 MailScanner[3316]: Cannot find Socket
> (/var/run/clamav/clamd) Exiting!
> May  1 14:31:05 btn-mailfilter-v2 MailScanner[3345]: Cannot find Socket
> (/var/run/clamav/clamd) Exiting!
> May  1 14:31:05 btn-mailfilter-v2 MailScanner[3353]: Cannot find Socket
> (/var/run/clamav/clamd) Exiting!
> May  1 14:31:06 mailfilter9 MailScanner[87553]: Cannot find Socket
> (/var/run/clamav/clamd) Exiting!
> May  1 14:31:07 btn-mailfilter-v2 MailScanner[3369]: Cannot find Socket
> (/var/run/clamav/clamd) Exiting!
> May  1 14:31:07 btn-mailfilter-v2 MailScanner[3374]: Cannot find Socket
> (/var/run/clamav/clamd) Exiting!
> May  1 14:31:07 btn-mailfilter-v2 MailScanner[3377]: Cannot find Socket
> (/var/run/clamav/clamd) Exiting!
> May  1 14:31:08 btn-mailfilter-v2 MailScanner[3383]: Cannot find Socket
> (/var/run/clamav/clamd) Exiting!
> May  1 14:31:11 btn-mailfilter-v2 MailScanner[3411]: Cannot find Socket
> (/var/run/clamav/clamd) Exiting!
> May  1 14:31:11 btn-mailfilter-v2 MailScanner[3415]: Cannot find Socket
> (/var/run/clamav/clamd) Exiting!
> May  1 14:31:11 btn-mailfilter-v2 MailScanner[3418]: Cannot find Socket
> (/var/run/clamav/clamd) Exiting!
> May  1 14:31:12 btn-mailfilter-v2 MailScanner[3430]: Cannot find Socket
> (/var/run/clamav/clamd) Exiting!
> May  1 14:31:12 btn-mailfilter-v2 MailScanner[3432]: Cannot find Socket
> (/var/run/clamav/clamd) Exiting!
> May  1 14:31:12 btn-mailfilter-v2 MailScanner[3433]: Cannot find Socket
> (/var/run/clamav/clamd) Exiting!
> May  1 14:31:14 btn-mailfilter-v2 MailScanner[3444]: Cannot find Socket
> (/var/run/clamav/clamd) Exiting!
> May  1 14:31:14 btn-mailfilter-v2 MailScanner[3447]: Cannot find Socket
> (/var/run/clamav/clamd) Exiting!
> May  1 14:31:14 btn-mailfilter-v2 MailScanner[3452]: Cannot find Socket
> (/var/run/clamav/clamd) Exiting!
> May  1 14:31:18 btn-mailfilter-v2 MailScanner[3495]: Cannot find Socket
> (/var/run/clamav/clamd) Exiting!
> May  1 14:31:18 btn-mailfilter-v2 MailScanner[3492]: Cannot find Socket
> (/var/run/clamav/clamd) Exiting!
> May  1 14:31:18 btn-mailfilter-v2 MailScanner[3493]: Cannot find Socket
> (/var/run/clamav/clamd) Exiting!
> May  1 14:31:21 btn-mailfilter-v2 MailScanner[3523]: Cannot find Socket
> (/var/run/clamav/clamd) Exiting!
> May  1 14:31:22 btn-mailfilter-v2 MailScanner[3528]: Cannot find Socket
> (/var/run/clamav/clamd) Exiting!
>
>
> The socket is set to /var/run/clamav/clamd in my mailscanner.conf file so
> this is not the problem. Most of the time clamd runs happily but I see this
> a lot during the day.
>
> I can provide clamscan -n or clamscan -debug, but I'm not sure what is
> best. I've looked at a lot of different threads with some of the messages I
> have seen but I can't trace where the problem might be.
>
>
> I do see this message a lot when I verbose log - Scanthread: connection
> shut down (FD 9)
>
>
> I just built a new freebsd10 server and that doesn't seem to have the
> problem, yet... I put that in the loop this morning and it seems to be
> working fine. I've not loaded any third party databases yet, but ideally I
> would like to use them as they obviously catch more stuff.
>
> Thanks,
> Rich
>
>
>
> _______________________________________________
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
> http://www.clamav.net/support/ml
>
_______________________________________________
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq
http://www.clamav.net/support/ml

Reply via email to