Hi,
I'm seeing a problem on a bunch of Solaris 10 SPARC servers running 0.97.x
since about 00:55 BST this morning. Our 0.96 hosts seem to be ok (and I've
downgraded the important 0.97 ones so that clamd can run...).
The following error occurs $SELF_CHECK_INTERVAL (600s) after clamd start:
Mon Oct 24 10:27:30 2011 -> No stats for Database check - forcing reload
Mon Oct 24 10:27:34 2011 -> Reading databases from /var/clamav
Mon Oct 24 10:28:37 2011 -> ERROR: Database initialization error: can't compile
engine: Failure in bytecode testmode
Mon Oct 24 10:28:40 2011 -> Terminating because of a fatal error.
Mon Oct 24 10:28:40 2011 -> Waiting for all threads to finish
Mon Oct 24 10:28:40 2011 -> Shutting down the main socket.
Mon Oct 24 10:28:40 2011 -> Pid file removed.
Mon Oct 24 10:28:40 2011 -> --- Stopped at Mon Oct 24 10:28:40 2011
Mon Oct 24 10:28:40 2011 -> Closing the main socket.
Mon Oct 24 10:28:40 2011 -> Socket file removed.
I have tried:
* blowing away the definitions and re-downloading via fresh clam
* upgrading from 0.97.1 to 0.97.3 (again with brand new definitions)
Downgrading to 0.96 has made the problem go away but is obviously not ideal...
A colleague noticed this post from Friday:
http://lurker.clamav.net/thread/20111023.183536.ad0fdad6.en.html
... which appears possibly related -- also Solaris, also failing during
self-check but their's was failing within freshclam and fixed itself when
"daily.cld was updated to 13840" -- we're on 13843 :(
Thanks for any advice!
Information that may be useful:
$ clamconf -n
Checking configuration files in /usr/local/etc
Config file: clamd.conf
-----------------------
LogFileMaxSize = "268435456"
LogTime = "yes"
LogVerbose = "yes"
PidFile = "/var/run/clamd.pid"
TemporaryDirectory = "/var/tmp"
LocalSocket = "/tmp/clamd.socket"
Config file: freshclam.conf
---------------------------
PidFile = "/var/run/freshclam.pid"
DatabaseMirror = "database.clamav.net"
HTTPProxyServer = "advocate.kent.ac.uk"
HTTPProxyPort = "3128"
clamav-milter.conf not found
Software settings
-----------------
Version: 0.97.3
Optional features supported: MEMPOOL IPv6 AUTOIT_EA06
Database information
--------------------
Database directory: /var/clamav
daily.cld: version 13843, sigs: 15910, built on Mon Oct 24 04:10:43 2011
main.cld: version 54, sigs: 1044387, built on Tue Oct 11 15:34:20 2011
bytecode.cld: version 149, sigs: 39, built on Sun Oct 23 09:29:41 2011
Total number of signatures: 1060336
Platform information
--------------------
uname: solaris2.10
OS: solaris2.10, ARCH: sparc, CPU: sparc
Full OS version: Solaris 10 10/09 s10s_u8wos_08a SPARC
zlib version: 1.2.3 (1.2.3), compile flags: 55
platform id: 0x0e663f3f1400000000000590
Build information
-----------------
Sun studio: (0.5.144)
CPPFLAGS: -I/usr/local/include
CFLAGS: -g
CXXFLAGS:
LDFLAGS: -L/usr/local/lib -R/usr/local/lib
Configure: '--with-pic' '--disable-rpath' '--prefix=/usr/local'
'--disable-clamav' '--disable-bzip2' '--datadir=/var/clamav'
'--with-dbdir=/var/clamav' '--disable-unrar' 'CC=cc' 'LDFLAGS=-L/usr/local/lib
-R/usr/local/lib' --enable-ltdl-convenience
sizeof(void*) = 4
Engine flevel: 63, dconf: 63
Mon Oct 24 10:04:10 2011 -> +++ Started at Mon Oct 24 10:04:10 2011
Mon Oct 24 10:04:10 2011 -> clamd daemon 0.97.1 (OS: solaris2.10, ARCH: sparc,
CPU: sparc)
Mon Oct 24 10:04:10 2011 -> Log file size limited to 268435456 bytes.
Mon Oct 24 10:04:10 2011 -> Reading databases from /var/clamav
Mon Oct 24 10:04:10 2011 -> Not loading PUA signatures.
Mon Oct 24 10:04:10 2011 -> Bytecode: Security mode set to "TrustSigned".
Mon Oct 24 10:05:07 2011 -> Loaded 1059084 signatures.
Mon Oct 24 10:05:13 2011 -> LOCAL: Unix socket file /tmp/clamd.socket
Mon Oct 24 10:05:13 2011 -> LOCAL: Setting connection queue length to 200
Mon Oct 24 10:05:13 2011 -> Limits: Global size limit set to 104857600 bytes.
Mon Oct 24 10:05:13 2011 -> Limits: File size limit set to 26214400 bytes.
Mon Oct 24 10:05:13 2011 -> Limits: Recursion level limit set to 16.
Mon Oct 24 10:05:13 2011 -> Limits: Files limit set to 10000.
Mon Oct 24 10:05:13 2011 -> Limits: Core-dump limit is 2147483647.
Mon Oct 24 10:05:13 2011 -> Archive support enabled.
Mon Oct 24 10:05:13 2011 -> Algorithmic detection enabled.
Mon Oct 24 10:05:13 2011 -> Portable Executable support enabled.
Mon Oct 24 10:05:13 2011 -> ELF support enabled.
Mon Oct 24 10:05:13 2011 -> Mail files support enabled.
Mon Oct 24 10:05:13 2011 -> OLE2 support enabled.
Mon Oct 24 10:05:13 2011 -> PDF support enabled.
Mon Oct 24 10:05:13 2011 -> HTML support enabled.
Mon Oct 24 10:05:13 2011 -> Self checking every 600 seconds.
Mon Oct 24 10:05:13 2011 -> Listening daemon: PID: 10989
Mon Oct 24 10:05:13 2011 -> MaxQueue set to: 100
Mon Oct 24 10:14:08 2011 -> Waiting for all threads to finish
Mon Oct 24 10:14:11 2011 -> Shutting down the main socket.
Mon Oct 24 10:14:11 2011 -> Pid file removed.
Mon Oct 24 10:14:11 2011 -> --- Stopped at Mon Oct 24 10:14:11 2011
Mon Oct 24 10:14:11 2011 -> Closing the main socket.
Mon Oct 24 10:14:11 2011 -> Socket file removed.
--
Matthew Slowe <m.sl...@kent.ac.uk> | Tel: +44 (0)1227 824265
Server Infrastructure Team, IS | Fax: +44 (0)1227 824078
University of Kent, Canterbury, Kent | Web: http://www.kent.ac.uk/
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml
