Re: [Clamav-users] Clamd protocol

2004-04-09 Thread Przemyslaw Wegrzyn
On Thursday 08 of April 2004 02:11, Tomasz Kojm wrote: > On Wed, 7 Apr 2004 01:57:23 +0200 > > For a "very simple mail scanner" the (b) solution seems to be the best > IMHO. Well, anyway it would be great, if someday ClamAV distribution includes something like "libclamdclient". Looking at clamdsc

Re: [Clamav-users] Clamd protocol

2004-04-07 Thread Tomasz Kojm
On Wed, 7 Apr 2004 01:57:23 +0200 Przemyslaw Wegrzyn <[EMAIL PROTECTED]> wrote: > Hi! > > I'm about to include clamavis support in our very simple mail scanner. > My first idea was to use libclamav for that, however my filter will be > > integrated with our mail server in the way that it will be

RE: [Clamav-users] clamd protocol

2004-01-19 Thread Philipp Grosswiler
> If you have can put an accurate time on when clamd stopped > responding, would it correspond to their being a virus DB update? I don't think so. > I assume that you do automatic updates and this is signalled > to clamd (probably via freshclam --daemon-notify). That's true, I am doing automat

RE: [Clamav-users] clamd protocol

2004-01-19 Thread Trog
Quoting Philipp Grosswiler <[EMAIL PROTECTED]>: > > So, how is clamd behaving with the patch and ThreadTimout=0? > > > > Is it any better? > > It is actually better, but unfortunately, there still seems to be a > problem > somewhere. If you have can put an accurate time on when clamd stopped r

RE: [Clamav-users] clamd protocol

2004-01-17 Thread Philipp Grosswiler
> So, how is clamd behaving with the patch and ThreadTimout=0? > > Is it any better? It is actually better, but unfortunately, there still seems to be a problem somewhere. Here is what gdb shows me: GNU gdb 5.3.92 Copyright 2003 Free Software Foundation, Inc. GDB is free software, covered by the

RE: [Clamav-users] clamd protocol

2004-01-16 Thread Philipp Grosswiler
> So, how is clamd behaving with the patch and ThreadTimout=0? > > Is it any better? Yes, indeed. It didn't crash since one day now. I will continue to observe. Regards, Phil. --- The SF.Net email is sponsored by EclipseCon 2004 Premiere Con

RE: [Clamav-users] clamd protocol

2004-01-16 Thread Trog
Quoting Philipp Grosswiler <[EMAIL PROTECTED]>: > > Thank you for the patch, I will apply it and re-compile clamd. > So, how is clamd behaving with the patch and ThreadTimout=0? Is it any better? Cheers, -trog --- The SF.Net email is sponso

Re: [Clamav-users] clamd protocol

2004-01-15 Thread Tomasz Kojm
On Thu, 15 Jan 2004 16:45:20 + (GMT) Trog <[EMAIL PROTECTED]> wrote: > Quoting Tomasz Kojm <[EMAIL PROTECTED]>: > > > > > > > Your patch is incorrect. It will always be true for threads that > > > are currently in use and they will instantly be killed. > > > > I disagree. The patch does the

Re: [Clamav-users] clamd protocol

2004-01-15 Thread Trog
Quoting Tomasz Kojm <[EMAIL PROTECTED]>: > > > > Your patch is incorrect. It will always be true for threads that are > > currently in use and they will instantly be killed. > > I disagree. The patch does the same thing that yours. > You patched a different line of code, so the argument is moo

Re: [Clamav-users] clamd protocol

2004-01-15 Thread Tomasz Kojm
On Thu, 15 Jan 2004 14:37:56 + (GMT) Trog <[EMAIL PROTECTED]> wrote: > Quoting Tomasz Kojm <[EMAIL PROTECTED]>: > > > > Oh, you're right - there was no chance to disable the timeout > > (however clamav.conf states that 0 disables the limit). It's even > > better to use: > > > > if(timeout &

Re: [Clamav-users] clamd protocol

2004-01-15 Thread Trog
Quoting Tomasz Kojm <[EMAIL PROTECTED]>: > Oh, you're right - there was no chance to disable the timeout (however > clamav.conf states that 0 disables the limit). It's even better to use: > > if(timeout && ths[i].active) > > instead of > > if(timeout && (time(NULL) - ths[i].start > timeout)) >

Re: [Clamav-users] clamd protocol

2004-01-15 Thread Tomasz Kojm
On Thu, 15 Jan 2004 13:27:16 + (GMT) Trog <[EMAIL PROTECTED]> wrote: > Quoting Philipp Grosswiler <[EMAIL PROTECTED]>: > > > > > Timed out after 3 seconds! Thats not right. > > > > > > A quick look at the code, and it seems that the thread > > > timeout code isn't correct. > > > > > > It

RE: [Clamav-users] clamd protocol

2004-01-15 Thread Philipp Grosswiler
> Do: > > cd /clamav-0.65/clamd > patch -p0 < /path/to/clamd.timeout.patch > > and in clamav.conf set this: > > ThreadTimeout 0 Thank you for the patch, I will apply it and re-compile clamd. I also saw in the log file, that whenever clamd crashes, the last line logged is something like this:

RE: [Clamav-users] clamd protocol

2004-01-15 Thread Trog
Quoting Philipp Grosswiler <[EMAIL PROTECTED]>: > > Timed out after 3 seconds! Thats not right. > > > > A quick look at the code, and it seems that the thread > > timeout code isn't correct. > > > > It is also possible that there is a mutex locking bug in clamd. > > Could this be the cause of

Re: [Clamav-users] clamd protocol

2004-01-15 Thread Trog
Quoting Tomasz Kojm <[EMAIL PROTECTED]>: > On Thu, 15 Jan 2004 09:49:22 + (GMT) > Trog <[EMAIL PROTECTED]> wrote: > > > [EMAIL PROTECTED] gale]$ clamdscan . > > /home/gale/./.mozilla/default/5bc4ycs6.slt/Cache/_CACHE_002_: > > Eicar-Test-Signature FOUND > > Session(0): Time out ERROR > > > >

Re: [Clamav-users] clamd protocol

2004-01-15 Thread Trog
Quoting Tomasz Kojm <[EMAIL PROTECTED]>: > On Thu, 15 Jan 2004 09:49:22 + (GMT) > Trog <[EMAIL PROTECTED]> wrote: > > > [EMAIL PROTECTED] gale]$ clamdscan . > > /home/gale/./.mozilla/default/5bc4ycs6.slt/Cache/_CACHE_002_: > > Eicar-Test-Signature FOUND > > Session(0): Time out ERROR > > > >

Re: [Clamav-users] clamd protocol

2004-01-15 Thread Tomasz Kojm
On Thu, 15 Jan 2004 09:49:22 + (GMT) Trog <[EMAIL PROTECTED]> wrote: > [EMAIL PROTECTED] gale]$ clamdscan . > /home/gale/./.mozilla/default/5bc4ycs6.slt/Cache/_CACHE_002_: > Eicar-Test-Signature FOUND > Session(0): Time out ERROR > > Timed out after 3 seconds! Thats not right. There was a ra

RE: [Clamav-users] clamd protocol

2004-01-15 Thread Philipp Grosswiler
> clamd will be linked against libpthread, the command 'ldd > /usr/local/sbin/clamd' should so this. The command shows the following output: libclamav.so.1 => /usr/local/lib/libclamav.so.1 (0x4001a000) libz.so.1 => /lib/libz.so.1 (0x4003c000) libbz2.so.1 => /usr/lib/libbz

RE: [Clamav-users] clamd protocol

2004-01-15 Thread Trog
Quoting Philipp Grosswiler <[EMAIL PROTECTED]>: > OK, clamd already crashed once again, and now I was trying to follow > your > guide... > > > (I'm going to assume you're clamd is multithreaded. If not > > just do steps 1-3 followed by the command 'bt'). > > I think so, how can I tell? clamd w

RE: [Clamav-users] clamd protocol

2004-01-14 Thread Philipp Grosswiler
OK, clamd already crashed once again, and now I was trying to follow your guide... > (I'm going to assume you're clamd is multithreaded. If not > just do steps 1-3 followed by the command 'bt'). I think so, how can I tell? > This may, or may not, provide some useful information. > > 1. Use 'ps

Re: [Clamav-users] clamd protocol

2004-01-14 Thread Internet Helpdesk
> The following is composed of wild conjecture and guesses...Just looking > at the symptoms I've seen discussed here, it sounds like something is > happening to cause a clamd child to stop responding and not exit(). And > somehow this child not exit()ing is preventing clamd from spawing more > ch

Re: [Clamav-users] clamd protocol

2004-01-14 Thread Mike Cathey
On Wed, 2004-01-14 at 10:57, Trog wrote: > But, perhaps it's just me, but I don't quite understand why > people are writing such scripts instead of spending their effort > actually trying to fix the problem. I've had it happen ~3 times in the last year. Each time it crashes, there are thousands o

RE: [Clamav-users] clamd protocol

2004-01-14 Thread Trog
Quoting Philipp Grosswiler <[EMAIL PROTECTED]>: > > However, if you tell me exactly (step by step) what I have to do to give > you > more information, I will try my best. I am very happy with ClamAV so far > and > I want to support it. > (I'm going to assume you're clamd is multithreaded. If n

RE: [Clamav-users] clamd protocol

2004-01-14 Thread Philipp Grosswiler
> What version are you running? ClamAV 0.65 > A number of people have reported this issue and it has > resulted in scripts being written that check the status of > clamd periodically and restart it. I heard about that, but I was asking about doing this remotely, since spamd itself is actually

Re: [Clamav-users] clamd protocol

2004-01-14 Thread Trog
Quoting Philipp Grosswiler <[EMAIL PROTECTED]>: > I would like to know how I can remotely restart the clamd server... or > actually kill all the processes. > > It happens that clamd sometimes is not working correctly anymore, but I > can > still remotely access it and send commands. I am using cl