Hajo,

Good call testing clamdscan with strace!  That's an interesting issue.  I'm 
glad to hear that setting TCPAddr solved it for you.


Micah Snyder
ClamAV Development
Talos
Cisco Systems, Inc.


On Aug 7, 2018, at 4:13 AM, Hajo Locke 
<hajo.lo...@gmx.de<mailto:hajo.lo...@gmx.de>> wrote:

Hello List,

have an odd behaviour of clamav. Version is 0.100.1+dfsg-1ubuntu0.16.04.2
Short:
clamscan is able to find a virus in file, clamdscan not. 1st i thought about 
deprecation of AllowSupplementaryGroups, but was not confirmed.

clamdscan -v tells only about an error, but no detailed info, so I did a strace 
to clamdscan and found this errormessage:

connect(3, {sa_family=AF_INET6, sin6_port=htons(3310), inet_pton(AF_INET6, 
"::", &sin6_addr), sin6_flowinfo=0, sin6_scope_id=0}, 28) = -1 EADDRNOTAVAIL 
(Cannot assign requested address)

In clamd.conf i have:

TCPSocket 3310
By default clamav binds on any configured IP-Adress, i can see this with lsof.
It looks like that clamdscan tries to connect to ipv6 Adress first and ends up 
in this errormessage and exits, thats my reading of the line.
It is working again if i add "TCPAddr 127.0.0.1" to my clamd.conf.

Is this an expected behaviour? ipv6 is disabled on this machine, clamdscan 
should not try to use it.

Thanks,
Hajo

_______________________________________________
clamav-users mailing list
clamav-users@lists.clamav.net<mailto:clamav-users@lists.clamav.net>
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

_______________________________________________
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Reply via email to