Okay, I'm back to standard logging on ClamAV then....
Thanks
On Mon, Oct 3, 2016 at 2:55 AM, Thomas Eckardt <thomas.ecka...@thockar.com>
wrote:
> >1) Is verbose logging slowing things
>
> The MainThread goes slower than more is logged
>
> >1) and causing the daemon to be unreachable
>
> No.
>
> >1) is this happening with standard logging too and just not
> >logged?
>
> Yes.
>
> >2) Is this normal? If not, what should I do to fix this?
>
> This is normal. Every time the clamd reloads signatures or does the self
> check (default 600 seconds) it becomes unavailable.
> If you've configured to use more than one clamd, the next will be used.
> If non of the configured clamd is available, you'll get the warning:
> ClamAV Temporary Off :....
>
> Thomas
>
>
>
>
> Von: K Post <nntp.p...@gmail.com>
> An: ASSP development mailing list <assp-test@lists.sourceforge.net>
> Datum: 02.10.2016 20:44
> Betreff: Re: [Assp-test] Very minor request: ClamAV more verbose
> logging?
>
>
>
> Thanks for the reply.
>
> Doesn't ASSP know what it's sending to the scanner though? And it's ASSP
> that writes to maillog, not ClamAV right?
>
> Separately, I turned ClamAV logging to verbose just to see the logs, and
> with this setting as such, I'm getting:
> Warning: the ClamAV daemon at 127.0.0.1:3310 seems to be down
> a couple of times an hour.
>
> I see no issues with ClamAV, but always get worried about warnings. With
> ClamAV logging set to standard, I don't get these warnings. So the
> questions for me become:
> 1) Is verbose logging slowing things and causing the daemon to be
> unreachable or is this happening with standard logging too and just not
> logged?
> 2) Is this normal? If not, what should I do to fix this?
>
>
>
> On Sun, Oct 2, 2016 at 3:05 AM, Thomas Eckardt
> <thomas.ecka...@thockar.com>
> wrote:
>
> > The scanning engine does not know where the content comes from
> > (attachment, decompressed attachment, body check, text parts, mail
> > analyzer, archive post processor ... . )
> >
> > So - no chance to have this information there.
> >
> > Thomas
> >
> >
> >
> > Von: K Post <nntp.p...@gmail.com>
> > An: ASSP development mailing list <assp-test@lists.sourceforge.net>
> > Datum: 01.10.2016 22:02
> > Betreff: [Assp-test] Very minor request: ClamAV more verbose
> > logging?
> >
> >
> >
> > With verbose logging for clamav on, we get lines like:
> > ClamAV: scanned 1146936 bytes in whitelisted message - OK
> >
> > Would it be possible to add the name of the file being scanned?
> > ClamAV: scanned 1146936 bytes in whitelisted message - invoice.pdf - OK
> > ------------------------------------------------------------
> > ------------------
> > Check out the vibrant tech community on one of the world's most
> > engaging tech sites, SlashDot.org! http://sdm.link/slashdot
> > _______________________________________________
> > Assp-test mailing list
> > Assp-test@lists.sourceforge.net
> > https://lists.sourceforge.net/lists/listinfo/assp-test
> >
> >
> >
> >
> > DISCLAIMER:
> > *******************************************************
> > This email and any files transmitted with it may be confidential,
> legally
> > privileged and protected in law and are intended solely for the use of
> the
> >
> > individual to whom it is addressed.
> > This email was multiple times scanned for viruses. There should be no
> > known virus in this email!
> > *******************************************************
> >
> >
> > ------------------------------------------------------------
> > ------------------
> > Check out the vibrant tech community on one of the world's most
> > engaging tech sites, SlashDot.org! http://sdm.link/slashdot
> > _______________________________________________
> > Assp-test mailing list
> > Assp-test@lists.sourceforge.net
> > https://lists.sourceforge.net/lists/listinfo/assp-test
> >
> >
> ------------------------------------------------------------
> ------------------
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, SlashDot.org! http://sdm.link/slashdot
> _______________________________________________
> Assp-test mailing list
> Assp-test@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/assp-test
>
>
>
>
> DISCLAIMER:
> *******************************************************
> This email and any files transmitted with it may be confidential, legally
> privileged and protected in law and are intended solely for the use of the
>
> individual to whom it is addressed.
> This email was multiple times scanned for viruses. There should be no
> known virus in this email!
> *******************************************************
>
>
> ------------------------------------------------------------
> ------------------
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, SlashDot.org! http://sdm.link/slashdot
> _______________________________________________
> Assp-test mailing list
> Assp-test@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/assp-test
>
>
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, SlashDot.org! http://sdm.link/slashdot
_______________________________________________
Assp-test mailing list
Assp-test@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-test
