On Fri, 27 May 2005, lattera wrote:
can't use strace, because I don't know the email that is making it
hang. that is why I need to use gdb, so I can look through the
stack/heap for the email...
You're saying it's hung, taking 100% of CPU. So just use top to find
the PID of the hung process,
can't use strace, because I don't know the email that is making it
hang. that is why I need to use gdb, so I can look through the
stack/heap for the email...
On 5/27/05, Damian Menscher <[EMAIL PROTECTED]> wrote:
> On Fri, 27 May 2005, lattera wrote:
>
> > Well, clamscan still hangs. I'm using ve
On Thu, 26 May 2005, Dennis Peterson wrote:
> [EMAIL PROTECTED] wrote:
> >
> > with friendly-names being attached to the virus, AFTER the developer
> > has submitted into the database? After the dust has settled, there
> > should be plenty of time to agree on what to call each virus.
Seriously,
[EMAIL PROTECTED] wrote:
René Berber wrote:
Perhaps your question is more general, not only the clamav database,
but about a taxonomy for viruses. The way I see it, when a new virus
is found, the developers or database maintainers try to get the
detection strings ASAP and would not like to loo
On Fri, 27 May 2005, lattera wrote:
Well, clamscan still hangs. I'm using version 0.85.1. I cannot gdb
attach to tell you guys why/where it's hanging, I'm sorry.
What about an strace (or whatever your OS equivalent is)?
Damian Menscher
--
-=#| Physics Grad Student & SysAdmin @ U Illinois Urba
Well, clamscan still hangs. I'm using version 0.85.1. I cannot gdb
attach to tell you guys why/where it's hanging, I'm sorry.
--
lattera
http://lattera.antitech.org/
http://lattera.retoros.org/
http://retoros.org/
___
http://lurker.clamav.net/list/clama
René Berber wrote:
> Perhaps your question is more general, not only the clamav database,
> but about a taxonomy for viruses. The way I see it, when a new virus
> is found, the developers or database maintainers try to get the
> detection strings ASAP and would not like to loose time looking up
>
guenther wrote:
> So, in conclusion: Are my assumptions correct, that this partially is
> due to old names? Is there at least a consensus on the classified naming
> amongst AV vendors (as mentioned above)? And are dots and dashes treated
> equally these days?
I'm not an expert, but it seems to me
I've been trying out the 20050524 devel snapshot on one of my servers since
the post regarding the buffer overrun problem. System is Solaris 8 on
UltraSparc, gcc 3.4.0
The 20050524 clamd is now dieing on database reloads. (I just upgraded to
the 20050526 snap, same behavior)
Enableing
On Thu, 2005-05-26 at 13:59 -0500, René Berber wrote:
> > Does the absence of any replies mean, there is no real naming convention
> > and it is kind of random? ;-)
>
> Have you seen?
> http://clamav.net/cvdinfo.html#pagestart
Yes, I read that page before posting to the list. Unfortunately it
Hello david thompson,
> Sorry, I did not know about freshclam -v. Anyway here is some of the output.
>
> freshclam -v
> main.cvd is up to date (version: 31, sigs:33079, f-level: 4, builder:tkojm)
> daily.cvd version from DNS:894
> Retrieving http://db.uk.clamav.net/daily.cvd
> Downloading dail
guenther wrote:
> Anyone?
>
> Does the absence of any replies mean, there is no real naming convention
> and it is kind of random? ;-)
Have you seen?
http://clamav.net/cvdinfo.html#pagestart
--
René Berber
___
http://lurker.clamav.net/list/clamav-
Damian Menscher wrote:
> Looking forward to 0.90, when these debates can finally end.
Indeed. I am looking forward to 0.90, too. :-)
Julian.
pgpOYb3LeJZTW.pgp
Description: PGP signature
___
http://lurker.clamav.net/list/clamav-users.html
On Thu, 26 May 2005, aCaB wrote:
some people never learn.
Agreed ;)
Looking forward to 0.90, when these debates can finally end.
Damian Menscher
--
-=#| Physics Grad Student & SysAdmin @ U Illinois Urbana-Champaign |#=-
-=#| 488 LLP, 1110 W. Green St, Urbana, IL 61801 Ofc:(217)333-0038 |#=-
On Thu, 2005-05-26 at 12:08 -0500, Daniel J McDonald wrote:
> Damian - give it up. The clamav team has already agreed to filter those
> out for you in version 0.90. A good portion of the rest of us do want
> clamav to catch these.
Thanks for the details Daniel, now I see. Bad me asked about the
On Thu, 2005-05-26 at 18:26 +0200, guenther wrote:
> On Thu, 2005-05-26 at 10:42 -0500, Damian Menscher wrote:
> > On Thu, 26 May 2005, guenther wrote:
> >
> > > However, within the last 12 hours I got 9 Phishing Mails (obviously
> > > basically the same one) slipping through.
> > >
> > > So, shou
On Thu, 2005-05-26 at 18:43 +0200, aCaB wrote:
> Yes, please submit your phishing samples using the link on clamav homepage.
Done, with the Received: and To: headers removed. Hope that's ok.
Thanks aCaB for your response. As I mentioned, I'm fairly new to ClamAV,
and I think I should ask if in do
On Wed, 25 May 2005, Dennis Peterson wrote:
> Jef Poskanzer said:
> > I've been working on this for a few months, and just published it today:
> >
> > http://www.acme.com/mail_filtering/
> >
> > ClamAV gets a prominent mention.
> > ---
> > Jef
>
> Nice work, Jef - where does one contribute to
Todd Lyons said:
> haplopelma lividum wanted us to know:
>>
>>grep FixStaleSocket clamd.conf
>>FixStaleSocket
>
> Is that the config file that your clamav-milter is reading? Make sure
> that you don't have multiple config files lying around (though that path
> should be hardcoded into clamav-milt
On 05/26/05 18:26, guenther wrote:
So ClamAV obviously is meant to trigger on phishing mails, but you don't
want new ones to be reported?
..guenther
Don't mind him, some people never learn.
Yes, please submit your phishing samples using the link on clamav homepage.
Cheers,
acab
___
On Thu, 2005-05-26 at 10:42 -0500, Damian Menscher wrote:
> On Thu, 26 May 2005, guenther wrote:
>
> > However, within the last 12 hours I got 9 Phishing Mails (obviously
> > basically the same one) slipping through.
> >
> > So, should I go on and report one or two samples?
>
> Yes, to the SpamAs
Tomasz Kojm wrote:
On Wed, 25 May 2005 14:12:14 -0600
Vasiliy Boulytchev <[EMAIL PROTECTED]> wrote:
Gents,
I am getting this error from MailScanner:
LibClamAV Error: cl_free: root == NULL
LibClamAV Error: cl_free: root == NULL
However, I can clamscan any dire/file.
Please re
On Thu, 26 May 2005, guenther wrote:
However, within the last 12 hours I got 9 Phishing Mails (obviously
basically the same one) slipping through.
So, should I go on and report one or two samples?
Yes, to the SpamAssassin team.
Damian Menscher
--
-=#| Physics Grad Student & SysAdmin @ U Illi
> Would it be possible to have existing threads use the old loaded
> database and to have the new threads use a new loaded database?
>
> Destroy the old database when its ref_count hits 0.
Of all the noise that's been put around on this issue recently, that's
the first good suggestion. I like the
haplopelma lividum wanted us to know:
>>>my system is rh7.3 clamd + clamav-milter v.0.85.1 and i have a little
>>>problem. when i execute "service clamav-milter stop" system is
>>>answering "ok", but don't delete clmilter.sock. so when i execute
>>>"service clamav-milter start" syste
Damian Menscher wrote:
On Tue, 24 May 2005, Doug Hardie wrote:
On May 24, 2005, at 13:21, Stephen Gran wrote:
Just to bring you (and anyone else joining us) up to speed, here's a
description of how it's supposed to work:
When there's a database update, the milter wants everything to be
> I just started using ClamAV and it is performing great so far. :)
>
> As I prefer to call ClamAV from procmail (actually, I used YAVR before,
> a procmail only based virus signature scanner) my current setup is
> procmail / clamassassin / clamdscan.
>
>
> Rather than dumping all Virii to a si
Hey folks,
About a week ago I installed ClamAV on my local machine and it is doing
a great job so far, catching Virii and even Phishing Mails. Database
updated:
ClamAV 0.85.1/894/Wed May 25 14:53:16 2005 signatures 31.894
However, within the last 12 hours I got 9 Phishing Mails (obviously
basica
> Thank you, it worked and am now running the new clamav.
> However I got these
> messages:
>
> checking for curl >= 7.10.0... FAILED
> configure: WARNING: curl-config was not found
> checking for mi_stop in -lmilter... no
> checking for library containing strlcpy... no
> checking for mi_stop in
Sorry, I did not know about freshclam -v. Anyway here is some of the output.
freshclam -v
Current working direstory is /usr/local/share/clamav
max retries ===3
ClamAv update process started at thu May 26 10:10:37 2005
Querying current.cvd.clamav.net
TTL:900
software version from DNS: 0.85.1
main.
On Thu, 26 May 2005 07:25:22 +0100 in
[EMAIL PROTECTED] Matt Fretwell
<[EMAIL PROTECTED]> wrote:
> From memory, (so may be wrong), supply the following option to
> configure:
>
> --without-milter
--without milter
is the correct syntax.
--
Brian Morrison
bdm at fenrir dot org dot uk
G
31 matches
Mail list logo
