rpm -qa clamav-milter clamav-milter-0.101.2-2.fc30.x86_64 rpm -qa clamd clamd-0.101.2-2.fc30.x86_64
See some logs and statuses below. clamd takes up all of the CPU. clamd does appear to start based on the ps command but you can see the status shows no running; PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND 26618 root 20 0 214188 207576 7996 R 99.0 0.4 0:10.76 clamd Tue Jul 30 14:30:17 2019 -> WARNING: No clamd server appears to be available Tue Jul 30 14:31:16 2019 -> Failed to establish a connection to clamd Tue Jul 30 14:31:16 2019 -> Probe for slot 1 returned: failed Tue Jul 30 14:31:16 2019 -> WARNING: No clamd server appears to be available Tue Jul 30 14:32:15 2019 -> Failed to establish a connection to clamd Tue Jul 30 14:32:15 2019 -> Probe for slot 1 returned: failed Tue Jul 30 14:32:15 2019 -> WARNING: No clamd server appears to be available ps -auwx|grep clam clamav 2538 0.0 0.0 18348 3156 ? Ss Jul29 0:00 /usr/bin/freshclam -d -c 4 clamav 24692 0.0 0.0 19852 10044 ? Ss 14:10 0:00 /usr/lib/systemd/systemd --user clamav 24697 0.0 0.0 181296 5200 ? S 14:10 0:00 (sd-pam) clamav 24717 0.0 0.0 113064 3312 ? Ss 14:10 0:00 /bin/sh -c [ -x /usr/local/sbin/clamav-unofficial-sigs.sh ] && /usr/bin/bash /usr/local/sbin/clamav-unofficial-sigs.sh > /dev/null clamav 24718 0.0 0.0 113848 3908 ? S 14:10 0:00 /usr/bin/bash /usr/local/sbin/clamav-unofficial-sigs.sh clamilt 26222 0.0 0.0 88488 588 ? Ssl 14:18 0:00 /usr/sbin/clamav-milter -c /etc/mail/clamav-milter.conf root 26227 99.6 0.5 263348 251924 ? Rs 14:18 0:20 /usr/sbin/clamd -c /etc/clamd.d/scan.conf clamav 26360 1.8 0.0 126316 12992 ? S 14:18 0:00 /usr/bin/wget --no-check-certificate --quiet --connect-timeout=60 --random-wait --tries=3 --timeout=180 --output-document=/var/lib/clamav-unofficial-sigs/dbs-si/securiteinfo.hdb https://www.securiteinfo.com/get/signatures/6651194e2baf9979742029c715d7dd90c94e25355ca57fdf22c81828f6fe7a3fc01bfbee6c9a20efa17559c52a04cc4aab1cbe6810596bb16afae8518a9400d1/securiteinfo.hdb\ systemctl status clamd@scan.service * clamd@scan.service - Generic clamav scanner daemon Loaded: loaded (/usr/lib/systemd/system/clamd@scan.service; enabled; vendor preset: disabled) Active: inactive (dead) since Mon 2019-07-29 13:24:11 EDT; 24h ago Docs: man:clamd(8) man:clamd.conf(5) https://www.clamav.net/documents/ Jul 29 13:24:09 ourdomain.edu systemd[1]: /usr/lib/systemd/system/clamd@scan.service:1: .include directives are deprecated, and support for them will be removed in a future version of systemd. Please use drop-in files instead. Jul 29 13:24:11 ourdomain.edu systemd[1]: clamd@scan.service: Control process exited, code=killed, status=15/TERM Jul 29 13:24:11 ourdomain.edu systemd[1]: clamd@scan.service: Succeeded. Jul 29 13:24:11 ourdomain.edu systemd[1]: Stopped Generic clamav scanner daemon. Jul 30 04:53:06 ourdomain.edu systemd[1]: /usr/lib/systemd/system/clamd@scan.service:1: .include directives are deprecated, and support for them will be removed in a future version of systemd. Please use drop-in files instead. Jul 30 11:13:50 ourdomain.edu systemd[1]: /usr/lib/systemd/system/clamd@scan.service:1: .include directives are deprecated, and support for them will be removed in a future version of systemd. Please use drop-in files instead. Jul 30 11:19:10 ourdomain.edu systemd[1]: /usr/lib/systemd/system/clamd@scan.service:1: .include directives are deprecated, and support for them will be removed in a future version of systemd. Please use drop-in files instead. Jul 30 14:05:05 ourdomain.edu systemd[1]: /usr/lib/systemd/system/clamd@scan.service:1: .include directives are deprecated, and support for them will be removed in a future version of systemd. Please use drop-in files instead. Jul 30 14:05:07 ourdomain.edu systemd[1]: /usr/lib/systemd/system/clamd@scan.service:1: .include directives are deprecated, and support for them will be removed in a future version of systemd. Please use drop-in files instead. Jul 30 14:05:08 ourdomain.edu systemd[1]: /usr/lib/systemd/system/clamd@scan.service:1: .include directives are deprecated, and support for them will be removed in a future version of systemd. Please use drop-in files instead. systemctl status clamav-milter * clamav-milter.service - Milter module for the Clam Antivirus scanner Loaded: loaded (/usr/lib/systemd/system/clamav-milter.service; enabled; vendor preset: disabled) Active: active (running) since Mon 2019-07-29 13:23:46 EDT; 24h ago Main PID: 4350 (clamav-milter) Tasks: 3 (limit: 4915) Memory: 2.6M CGroup: /system.slice/clamav-milter.service `-4350 /usr/sbin/clamav-milter -c /etc/mail/clamav-milter.conf Jul 29 13:23:45 ourserver systemd[1]: Starting Milter module for the Clam Antivirus scanner... Jul 29 13:23:46 ourserver systemd[1]: Started Milter module for the Clam Antivirus scanner. Tue Jul 30 14:20:11 2019 -> +++ Started at Tue Jul 30 14:20:11 2019 Tue Jul 30 14:20:11 2019 -> Received 0 file descriptor(s) from systemd. Tue Jul 30 14:20:11 2019 -> clamd daemon 0.101.2 (OS: linux-gnu, ARCH: x86_64, CPU: x86_64) Tue Jul 30 14:20:11 2019 -> Log file size limited to 1048576 bytes. Tue Jul 30 14:20:11 2019 -> Reading databases from /var/lib/clamav Tue Jul 30 14:20:11 2019 -> Not loading PUA signatures. Tue Jul 30 14:20:11 2019 -> Bytecode: Security mode set to "TrustSigned". The uncommented directives in /etc/clamd.d/scan.conf are: LogFile /var/log/clamd.scan LogTime yes LogSyslog yes DatabaseDirectory /var/lib/clamav TCPSocket 3310 TCPAddr 127.0.0.1 I had to disable it in sendmail where I had this in sendmail.mc: INPUT_MAIL_FILTER(`clamav-milter', `S=inet:6666@127.0.0.1, F=, T=S:4m;R:4m')dnl This all starting happening after a reboot. Any ideas what may be wrong?
_______________________________________________ clamav-users mailing list clamav-users@lists.clamav.net https://lists.clamav.net/mailman/listinfo/clamav-users Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml