Re: [Clamav-users] kernel: Out of Memory:Killed process xxxxx (clamd).

2004-09-14 Thread Thomas Lamy
Fajar A. Nugraha wrote: D Walsh wrote: I sat down in front of a Solaris 9 system, installed clamav as instructed and yes indeed there appears to be a problem with the implementation of free(), in 30 mins of sending e-mail from the EICAR test site memory did climb to 2.87gb and did not clear i

Re: [Clamav-users] kernel: Out of Memory:Killed process xxxxx (clamd).

2004-09-14 Thread Ralf Hildebrandt
* Fajar A. Nugraha <[EMAIL PROTECTED]>: > Which brings my earlier suggestion. Is there any way to put a > built-in memory limiter (not external program like softlimit) to > clamd? Why add code to clamd when a good unix-like solution already exists? -- Ralf Hildebrandt (i.A. des IT-Zentrum)

Re[2]: [Clamav-users] clamav-milter

2004-09-14 Thread Max Chernogor
Hello Nigel, Tuesday, September 14, 2004, 10:48:44 AM, you wrote: >> I want to use this option for two servers runing clamd. >> What commandline for clamav-milter should be? NH> Here's my command line: NH> /usr/local/sbin/clamav-milter --max-children=2 --debug NH> --dont-wait --timeout=0 NH> --

Re: [Clamav-users] kernel: Out of Memory:Killed process xxxxx (clamd).

2004-09-14 Thread Fajar A. Nugraha
D Walsh wrote: I sat down in front of a Solaris 9 system, installed clamav as instructed and yes indeed there appears to be a problem with the implementation of free(), in 30 mins of sending e-mail from the EICAR test site memory did climb to 2.87gb and did not clear itself. [snip] This lead

Re: [Clamav-users] kernel: Out of Memory:Killed process xxxxx (clamd).

2004-09-14 Thread Jason Haar
For the record I just want to say that I think "using excessive memory" is more correct than "memory leak". The reason I thought clamd had a memory leak was because I'd run it under softlimits (set to say 40M) and clamd would end up (after mins,hours or days) hung at 39xxxM. The logs would show it

Re: [Clamav-users] kernel: Out of Memory:Killed process xxxxx (clamd).

2004-09-14 Thread D Walsh
On Sep 14, 2004, at 23:38, Fajar A. Nugraha wrote: Nigel Horne wrote: On Tuesday 14 Sep 2004 10:34, D Walsh wrote: Would you consider the following a sign of a memory leak? IDname user cpu threads real mem virtual mem - --

Re: [Clamav-users] kernel: Out of Memory:Killed process xxxxx (clamd).

2004-09-14 Thread Fajar A. Nugraha
Nigel Horne wrote: On Tuesday 14 Sep 2004 10:34, D Walsh wrote: Would you consider the following a sign of a memory leak? IDname user cpu threads real mem virtual mem 1899 freshclam cla

Re: [Clamav-users] kernel: Out of Memory:Killed process xxxxx (clamd).

2004-09-14 Thread Fajar A. Nugraha
Nigel Horne wrote: Though I probably should rephrase my statements from now, and no longer use the phrase "memory leak" but "high memory usage" instead. That is different. High memory usage != memory leak Actually, that is my point. Right now I'm not sure whether there IS any memory leak a

Re: [Clamav-users] clamav and procmail

2004-09-14 Thread Steve Lenti
On Tue, 14 Sep 2004 15:51:41 -0400, Bart Silverstrim <[EMAIL PROTECTED]> wrote: > Hello, > > I'm trying to integrate a clamav with a simple sitewide procmail recipe > to run clamscan-procfilter then take action if the headers contain the > virus tag (X-CLAMAV). The first part of the recipe in the

[Clamav-users] 2 questions - freshclam and options

2004-09-14 Thread Mark Mancini
I have 2 basic questions running ClamAV with Mailscanner 1) I read that freshclam keeps the AV-DB updated.  Is there info ( a link) on setting it up(or checking if it is already setup) and checking for updates? 2) *IMPORTANT QUESTION*  is there an option I can setup so if a user

Re: [Clamav-users] 2 questions - freshclam and options

2004-09-14 Thread Gerardo Reynoso
On Tuesday 14 September 2004 19:45, Mark Mancini wrote: > I have 2 basic questions running ClamAV with Mailscanner > > 1) I read that freshclam keeps the AV-DB updated. Is there info ( a link) > on setting it up(or checking if it is already setup) and checking for > updates? > Hint: have you chec

Re: [Clamav-users] kernel: Out of Memory:Killed process xxxxx (clamd).

2004-09-14 Thread Lutz Petersen
> > Would you call memory usage of 128MB leak? > > Would you call clamd memory usage of 3GB leak? > Neither. I would call losing reference to allocated memory a memory > leak. Ok, but just two things: The clam conf is set to limit the amount of memory that should be scanned. If there is no me

Re: [Clamav-users] clamav and procmail

2004-09-14 Thread John Fleming
- Original Message - From: "Bart Silverstrim" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, September 14, 2004 2:51 PM Subject: [Clamav-users] clamav and procmail > Hello, > > I'm trying to integrate a clamav with a simple sitewide procmail recipe > to run clamscan-procfilt

Re: [Clamav-users] Re: [Clamav-users] Question about sending 400 not knowing viruses to the database

2004-09-14 Thread Andrzej Zawadzki
[EMAIL PROTECTED] wrote: Hi, What about old viruses ? How many are recognized ? I'm just curious ;-) becouse I was suprized that old PS-MPC, IVP and Vme DOS virii contructors are recognized by online scanner That's one of the reason: http://sourceforge.net/mailarchive/message.php?msg_id=69051

[Clamav-users] clamav and procmail

2004-09-14 Thread Bart Silverstrim
Hello, I'm trying to integrate a clamav with a simple sitewide procmail recipe to run clamscan-procfilter then take action if the headers contain the virus tag (X-CLAMAV). The first part of the recipe in the script makes sense... * # :0fw: virus1.lock

Re: [Clamav-users] freshclam unable to notify clamd in chroot

2004-09-14 Thread Daniel S. Cohen
uname -a: Linux machine 2.4.19-ac4 #1 Wed Aug 7 00:10:12 EDT 2002 i686 unknown In my freshclam.conf, I had only NotifyClamd I changed it as you suggested ... we shall see. However, it does seem to be attempting to connect to the correct socket ... /var/run/clamav/clamd.sock (under the chroot).

Re: [Clamav-users] CVD extraction failure

2004-09-14 Thread Matt
Dmitry Alexeyev wrote: > BTW, is it possible to use unpacked database files with clamscan? > Unpacking it everytime email arrives is a bit overkill... > Use clamd with clamdscan. It's resident, reads once on initial startup. Matt --- Thi

Re: [Clamav-users] CVD extraction failure

2004-09-14 Thread Tomasz Kojm
On Tue, 14 Sep 2004 20:54:19 +0400 Dmitry Alexeyev <[EMAIL PROTECTED]> wrote: > BTW, is it possible to use unpacked database files with clamscan? You can unpack databases with `sigtool --unpack-current main.cvd` (the same for daily.cvd) and then point clamscan to the directory with extracted fil

Re: [Clamav-users] freshclam unable to notify clamd in chroot

2004-09-14 Thread showroom
Matt wrote: Daniel S. Cohen wrote: ERROR: Clamd was NOT notified: Can't connect to clamd through /var/run/clamav/clamd.sock The /var/run/clamav is within the chrooted environment. I've checked, double checked, and triple checked the permissions (since they are the same user, it should not be a

[Clamav-users] Re: [Clamav-users] Question about sending 400 not knowing viruses to the database

2004-09-14 Thread brandys
Hi, What about old viruses ? How many are recognized ? I'm just curious ;-) becouse I was suprized that old PS-MPC, IVP and Vme DOS virii contructors are recognized by online scanner Best Regards Bogusław Brandys Wiadomość Oryginalna Od: Tomasz Kojm <[EMAIL PROTECTED]> Do: [EMA

Re: [Clamav-users] freshclam unable to notify clamd in chroot

2004-09-14 Thread Matt
Daniel S. Cohen wrote: > > ERROR: Clamd was NOT notified: Can't connect to clamd through > /var/run/clamav/clamd.sock > > The /var/run/clamav is within the chrooted environment. I've checked, > double checked, and triple checked the permissions (since they are the > same user, it should not be

Re: [Clamav-users] CVD extraction failure

2004-09-14 Thread Dmitry Alexeyev
On Tuesday 14 September 2004 16:53, Dmitry Alexeyev wrote: > Hello, > > What can cause such error in ClamAV 0.75.1: > > ERROR: CVD extraction failure > ? > > Running > 'cat file | clamscan --stdout --recursive --mbox -' > via pipe from perl script (used in procmail). > > System is rather old Linux.

Re: [Clamav-users] freshclam unable to notify clamd in chroot

2004-09-14 Thread Timo Schöler
Hello, I've chrooted both freshclam and clamd to the same root and user. Everything is working well except freshclam complains it is unable to notify clamd of updates. I've been trying different things, and have been unable to get this resolved. This is the message from the logs: ERROR: Clamd was

[Clamav-users] freshclam unable to notify clamd in chroot

2004-09-14 Thread Daniel S. Cohen
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hello, I've chrooted both freshclam and clamd to the same root and user. Everything is working well except freshclam complains it is unable to notify clamd of updates. I've been trying different things, and have been unable to get this resolved. This

Re: [Clamav-users] kernel: Out of Memory:Killed process xxxxx (clamd).

2004-09-14 Thread Nigel Horne
On Tuesday 14 Sep 2004 11:07, Thomas Lamy wrote: > For quite a while (6 weeks) I collected each and every mail on one of my > MXes. I checked them "offline" for leaks using a shell wrapper, which > checked clams memory usage between each feeded mail, but found really > nothing. > I'll start tha

Re: [Clamav-users] kernel: Out of Memory:Killed process xxxxx (clamd).

2004-09-14 Thread Mike Lambert
On Tue, 14 Sep 2004, Trog wrote: > On Tue, 2004-09-14 at 06:30, Meni Shapiro wrote: > > > > Clamd works great for lots of people, but some have reported memory > > > leaks on latest stable (0.75.1), > > > which could cause your system to be "out of memory". > > A few people (out of the thousands w

Re: [Clamav-users] kernel: Out of Memory:Killed process xxxxx (clamd).

2004-09-14 Thread Nigel Horne
On Tuesday 14 Sep 2004 11:04, Fajar A. Nugraha wrote: > Nigel Horne wrote: > > >On Tuesday 14 Sep 2004 06:30, Meni Shapiro wrote: > > > > > >>Hi Fajar, > >>Thanks for you answer. It's the most usefull i got 'till today. > >>I will take a look at the tools you suguested... > >>The leak is from cl

RE: [Clamav-users] ClamAV on a Knoppix disk?

2004-09-14 Thread Guy Van Den Bergh
INSERT does this too. http://www.inside-security.de/insert_en.html Guy On Tue, 2004-09-14 at 09:14, Patrick Bihan-Faou wrote: > Hi, > > > Brad Morgan wrote: > > Does anyone know if ClamAV has been packaged with any of the > > Live Linux CDs? > > > > I've got a Windows PC that keeps rebooting

Re: [Clamav-users] a clamv miss

2004-09-14 Thread Matt
Steve Glines wrote: > I got the following in my email: > > Norton AntiVirus removed the attachment: [EMAIL PROTECTED] > The attachment was infected with the [EMAIL PROTECTED] virus. > > This is only third time clamv (stable and current) has missed. What > happened. The last miss was in exactly t

[Clamav-users] CVD extraction failure

2004-09-14 Thread Dmitry Alexeyev
Hello, What can cause such error in ClamAV 0.75.1: ERROR: CVD extraction failure ? Running 'cat file | clamscan --stdout --recursive --mbox -' via pipe from perl script (used in procmail). System is rather old Linux. If I run clamscan from shell, everything runs without any problems. I

Re: [Clamav-users] kernel: Out of Memory:Killed process xxxxx (clamd).

2004-09-14 Thread Nigel Horne
On Tuesday 14 Sep 2004 10:30, Fajar A. Nugraha wrote: > and since > valgrind only works > on Linux For the record, this is wrong. 1) Valgrind works on FreeBSD. 2) It's only x86, so it doesn't work on all Linux's. > I can't use it on Solaris/sparc, This is true. > Fajar -Nigel -- Nigel Hor

Re: [Clamav-users] kernel: Out of Memory:Killed process xxxxx (clamd).

2004-09-14 Thread Nigel Horne
On Tuesday 14 Sep 2004 10:34, D Walsh wrote: > Would you consider the following a sign of a memory leak? > > IDname user cpu threads real mem virtual mem > > > 1899 freshclam clamav 0.0

Re: [Clamav-users] kernel: Out of Memory:Killed process xxxxx (clamd).

2004-09-14 Thread Matt
Thomas Lamy wrote: > From the different posts here I bet there are library issues in BSD, as > that OS is number one when it comes to leakage complains. More specifically, it tends to be FreeBSD 5* systems which have the most complaints. FreeBSD 4* systems have been rock solid with Clam upto ju

[Clamav-users] Problem building clamav

2004-09-14 Thread Prakash
Hello all,     I am working on 11.11 PA (HPUX Platform). I tried to build clamav with the following configure options    ./configure --prefix=/opt/iexpress/clamav --enable-milter --with-tcpwrappers   The binaries does not use the archive  file libz.a , libgmp.a and libbz2.a  inst

Re: [Clamav-users] kernel: Out of Memory:Killed process xxxxx (clamd).

2004-09-14 Thread Trog
On Tue, 2004-09-14 at 12:07, Fajar A. Nugraha wrote: > Trog wrote: > > > >If you're scanning multiple 1GB files concurrently, then your going to > >use 1-2GB of memory. > > > That's just it. I put a size limit on my mail system, BEFORE clamd has a > chance to scan it, > so I know for a fact that

Re: [Clamav-users] kernel: Out of Memory:Killed process xxxxx (clamd).

2004-09-14 Thread Timo Schöler
A few people (out of the thousands who run ClamAV) have reported "memory leaks" in stable versions of clamd. However, none of those people have submitted a report from a memory debugging tool to show where the leak occurs on their systems, despite being asked to by the development team. None of t

Re: [Clamav-users] a clamv miss

2004-09-14 Thread Alen Sarkinovic
Same problem with virus [EMAIL PROTECTED] recognized by NAV on Windows 2000. Submit to online scanner is working fine, but clamscan on server does not detect virus. FreshClam is up2date. - Original Message - From: "Steve Glines" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday

Re: [Clamav-users] kernel: Out of Memory:Killed process xxxxx (clamd).

2004-09-14 Thread Fajar A. Nugraha
Trog wrote: I know that the amount of memory used should be varied depending on system activity, but when clamd uses 1 or 2 GB memory when it does nothing (well, it WAS very busy earlier, but it's doing nothing now) is _weird_ If you're scanning multiple 1GB files concurrently, then your goi

[Clamav-users] a clamv miss

2004-09-14 Thread Steve Glines
I got the following in my email: Norton AntiVirus removed the attachment: [EMAIL PROTECTED] The attachment was infected with the [EMAIL PROTECTED] virus. This is only third time clamv (stable and current) has missed. What happened. The last miss was in exactly the same message. Cheers -- Steve

Re: [Clamav-users] kernel: Out of Memory:Killed process xxxxx (clamd).

2004-09-14 Thread Trog
On Tue, 2004-09-14 at 11:04, Fajar A. Nugraha wrote: > > > >That is not evidence of a memory leak. It is evidence of as lot of memory > >being used at runtime which is a very different thing. > > > > > > > BTW, what IS the evidence of memory leak? There is no substantiated evidence at this point

Re: [Clamav-users] Re: [Clamav-users] CVS Clamav status

2004-09-14 Thread Trog
On Tue, 2004-09-14 at 10:38, [EMAIL PROTECTED] wrote: > Strange...I must messed with sources becouse program based on old clamav snapshot > worked with archves > properly but now test signature is only detected in plain text files and any > decompression like zip, gzip, > cab etc seems that ca

Re: [Clamav-users] kernel: Out of Memory:Killed process xxxxx (clamd).

2004-09-14 Thread Fajar A. Nugraha
Nigel Horne wrote: On Tuesday 14 Sep 2004 06:30, Meni Shapiro wrote: Hi Fajar, Thanks for you answer. It's the most usefull i got 'till today. I will take a look at the tools you suguested... The leak is from clamd...i checked 'top' and saw how it swallows all avialble memory until it is killed

Re: [Clamav-users] kernel: Out of Memory:Killed process xxxxx (clamd).

2004-09-14 Thread Thomas Lamy
Jason Haar wrote: On Tue, Sep 14, 2004 at 08:38:57AM +0100, Trog wrote: A few people (out of the thousands who run ClamAV) have reported "memory leaks" in stable versions of clamd. However, none of those people have submitted a report from a memory debugging tool to show where the leak occurs on

Re: [Clamav-users] kernel: Out of Memory:Killed process xxxxx (clamd).

2004-09-14 Thread D Walsh
On Sep 14, 2004, at 03:38, Trog wrote: On Tue, 2004-09-14 at 06:30, Meni Shapiro wrote: Clamd works great for lots of people, but some have reported memory leaks on latest stable (0.75.1), which could cause your system to be "out of memory". A few people (out of the thousands who run ClamAV) have r

[Clamav-users] Re: [Clamav-users] CVS Clamav status

2004-09-14 Thread brandys
Hello, Wiadomość Oryginalna Od: Tomasz Kojm <[EMAIL PROTECTED]> Do: [EMAIL PROTECTED] Data: Tue, 14 Sep 2004 01:57:43 +0200 Temat: Re: [Clamav-users] CVS Clamav status >On Mon, 13 Sep 2004 22:48:57 +0200 >[EMAIL PROTECTED] wrote: > >> Hello, >> >> What is the status of current CVS ver

Re: [Clamav-users] kernel: Out of Memory:Killed process xxxxx (clamd).

2004-09-14 Thread Trog
On Tue, 2004-09-14 at 09:42, Jason Haar wrote: > On Tue, Sep 14, 2004 at 08:38:57AM +0100, Trog wrote: > > A few people (out of the thousands who run ClamAV) have reported "memory > > leaks" in stable versions of clamd. > > > > However, none of those people have submitted a report from a memory >

Re: [Clamav-users] kernel: Out of Memory:Killed process xxxxx (clamd).

2004-09-14 Thread Fajar A. Nugraha
Trog wrote: On Tue, 2004-09-14 at 06:30, Meni Shapiro wrote: Clamd works great for lots of people, but some have reported memory leaks on latest stable (0.75.1), which could cause your system to be "out of memory". A few people (out of the thousands who run ClamAV) have reported "memory

Re: [Clamav-users] kernel: Out of Memory:Killed process xxxxx (clamd).

2004-09-14 Thread Nigel Horne
On Tuesday 14 Sep 2004 06:30, Meni Shapiro wrote: > Hi Fajar, > Thanks for you answer. It's the most usefull i got 'till today. > I will take a look at the tools you suguested... > The leak is from clamd...i checked 'top' and saw how it swallows all > avialble memory until it is killed by kernel.

Re: [Clamav-users] kernel: Out of Memory:Killed process xxxxx (clamd).

2004-09-14 Thread Nigel Horne
On Tuesday 14 Sep 2004 04:36, Fajar A. Nugraha wrote: > If you have another primary scanner (clamd is your backup), then you > should stick to it for now. > Clamd works great for lots of people, but some have reported memory > leaks on latest stable (0.75.1), > which could cause your system to b

RE: [Clamav-users] ClamAV on a Knoppix disk?

2004-09-14 Thread Patrick Bihan-Faou
Hi, Brad Morgan wrote: > Does anyone know if ClamAV has been packaged with any of the > Live Linux CDs? > > I've got a Windows PC that keeps rebooting over and over and > we suspect a > virus. It would be nice to have a Live Linux CD with ClamAV that can > freshclam somehow and then scan the PC

Re: [Clamav-users] kernel: Out of Memory:Killed process xxxxx (clamd).

2004-09-14 Thread Jason Haar
On Tue, Sep 14, 2004 at 08:38:57AM +0100, Trog wrote: > A few people (out of the thousands who run ClamAV) have reported "memory > leaks" in stable versions of clamd. > > However, none of those people have submitted a report from a memory > debugging tool to show where the leak occurs on their sy

Re: [Clamav-users] clamav-milter

2004-09-14 Thread Nigel Horne
On Tuesday 14 Sep 2004 07:58, Max Chernogor wrote: > Does anybody use clamav-milter with more then one clamd demon? Yes. > I want to use this option for two servers runing clamd. > What commandline for clamav-milter should be? Here's my command line: /usr/local/sbin/clamav-milter --max-childr

Re: [Clamav-users] kernel: Out of Memory:Killed process xxxxx (clamd).

2004-09-14 Thread Trog
On Tue, 2004-09-14 at 06:30, Meni Shapiro wrote: > > Clamd works great for lots of people, but some have reported memory > > leaks on latest stable (0.75.1), > > which could cause your system to be "out of memory". A few people (out of the thousands who run ClamAV) have reported "memory leaks" i

Re: OT: Linux/Sun (was: Re: [Clamav-users] SuSE 9.1 RPM of ClamAV 0.75.1)

2004-09-14 Thread Fajar A. Nugraha
On Sun, 12 Sep 2004 20:50:06 +0200, Timo Schöler <[EMAIL PROTECTED]> wrote: > > Itzchak Rehberg > > http://www.qumran.org/homes/izzy/ > > http://www.izzysoft.de/ > > "We have joy, we have fun, we boot Linux on our SUN..." > > Never! > > > > A wanna-be-OS that is too stupid to use my Sun's (P)MM

Re: [Clamav-users] ClamAV on a Knoppix disk?

2004-09-14 Thread Nigel Horne
On Monday 13 Sep 2004 6:38 pm, Brad Morgan wrote: > Does anyone know if ClamAV has been packaged with any of the Live Linux > CDs? > > I've got a Windows PC that keeps rebooting over and over and we suspect a > virus. It would be nice to have a Live Linux CD with ClamAV that can > freshclam somehow

[Clamav-users] clamav-milter

2004-09-14 Thread Max Chernogor
Hello , Does anybody use clamav-milter with more then one clamd demon? I want to use this option for two servers runing clamd. What commandline for clamav-milter should be? --server=HOSTNAME/ADDRESS, -s HOSTNAME/ADDRESS IP address or hostname of server(s) running clamd (w