Re: [Clamav-users] feature request for clam (STREAM mode)
Tomasz Kojm wrote: On Sun, 17 Aug 2003 19:38:10 +0200 Arkadiusz Miskiewicz [EMAIL PROTECTED] wrote: Hi, STREAM support is long awaited feature by me. Unfortunately it seems badly designed. The idea of the protocol is based on OpenAntiVirus ScannerDaemon's POST command, with some enhancements. Current protocol is: - connect with default clamav port (command connection) - send STREAM uppercase - clamd returns port number - we connect with that number and send data to be scanned there (data connection) That's it. Problems are: - if we want to scan few files we need to connect to reconnect to command connection every time, too - why? Why no multiple STREAM commands allowed? Do you mean STREAM should support an optional argument for a number of sockets clamd should start waiting on ? No problem. - data port is random so I need to open all ports on my firewall which is very This problem has been already reported a few days ago. The port number range will be configurable in clamav.conf. sad. Instead of this it would be great if I could send data over ,,command connection'' and don't use ,,data connection'' at all. Oh, I don't think this is a good idea - it will make the command socket a bottleneck because a scan process for may be long and we can't depend on the backlog argument of the listen() function due to portability reasons. I really, really dislike this solution which reminds me in some way to the (br0ken) ftp-protocol. A solution like this make any kind of loadbalancing(using a standard TCP balancing solution) nearly impossible. Any chance that this design could be changed to using a single TCP-Port. This would allow use to loadbalance/failover clamd easily between a large number of hosts (just like it's possible with spamd from the spamassassin package today). Stefan --- This SF.Net email sponsored by: Free pre-built ASP.NET sites including Data Reports, E-commerce, Portals, and Forums are available now. Download today and enter to win an XBOX or Visual Studio .NET. http://aspnet.click-url.com/go/psa0013ave/direct;at.aspnet_072303_01/01 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] feature request for clam (STREAM mode)
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Shouldn't this be on the developers list, not here? - -Nigel - -- Nigel Horne. Arranger, Composer, Conductor, Typesetter. Owner of the brass band group of the Internet. ICQ#20252325 [EMAIL PROTECTED] http://www.bandsman.co.uk/music.htm -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE/QIPCOv/MqfDWaY8RApe1AKCfnMzUe4FmPedTfw2FiM+jB1+jtACeOSD1 sZAQrJaDTdGlBOSsHu9H6+Y= =gQsP -END PGP SIGNATURE- --- This SF.Net email sponsored by: Free pre-built ASP.NET sites including Data Reports, E-commerce, Portals, and Forums are available now. Download today and enter to win an XBOX or Visual Studio .NET. http://aspnet.click-url.com/go/psa0013ave/direct;at.aspnet_072303_01/01 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
RE: [Clamav-users] Still Fighting Problem with clamd bombing out on Openbsd 3.3 w amavisd-new and postfix
I finally got a ktrace trap as well. 13403 clamdGIO fd 6 read 16 bytes 17433d48097703e9 13403 clamdRET read 8192/0x2000 13403 clamdPSIG SIGSEGV SIG_DFL code 2 addr=0x38383263 trapno=2 13403 clamdPSIG SIGSEGV SIG_DFL code 0 addr=0x0 trapno=0 13403 clamdNAMI clamd.core Is there anyone who can decifer these traces and tell me what it means? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ben Hooper Sent: Saturday, August 16, 2003 2:43 AM To: [EMAIL PROTECTED] Subject: RE: [Clamav-users] Still Fighting Problem with clamd bombing out on Openbsd 3.3 w amavisd-new and postfix If anyone has any suggestions I would love the help. I have two installs doing the exact same thing. So if I made a mistake in my setup I made it more than once. FWIW, I am seeing the same thing happen under 3.3-stable on two of my machines. Ktrace shows clamd bombing out with... 26027 clamdRET read 557/0x22d 26027 clamdPSIG SIGSEGV SIG_DFL code 1 addr=0x3033343d trapno=1 26027 clamdPSIG SIGSEGV SIG_DFL code 0 addr=0x0 trapno=0 Complete trace avaliable. Ben. --- This SF.Net email sponsored by: Free pre-built ASP.NET sites including Data Reports, E-commerce, Portals, and Forums are available now. Download today and enter to win an XBOX or Visual Studio .NET. http://aspnet.click-url.com/go/psa0013ave/direct;at.aspnet _072303_01/01 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users --- This SF.Net email sponsored by: Free pre-built ASP.NET sites including Data Reports, E-commerce, Portals, and Forums are available now. Download today and enter to win an XBOX or Visual Studio .NET. http://aspnet.click-url.com/go/psa0013ave/direct;at.aspnet_072303_01/01 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] Still Fighting Problem with clamd bombing out on Openbsd 3.3 w amavisd-new and postfix
On Fri, 15 Aug 2003 at 17:21:22 -0500, Lynn Duerksen wrote: Was wondering if anyone had any more suggestions. At this point I would even accept a script that would run from crontab to check if clamd is running. If not start it up again. I tried the script below and works well from a command line but not from crontab. It starts multiple clamd daemons. #!/bin/sh exec 1/var/log/messages exec 21 TIMESTAMP=`date +%b %e %H:%M:%S` # check for clamd daemon if skill -n clamd then echo $TIMESTAMP clamd is running else echo $TIMESTAMP restarting clamd daemon rm /var/amavisd/clamd.sock chroot -u amavisd /var/amavisd /usr/sbin/clamd fi *** [ I'm omitting the rest of your message because I don't use OpenBSD and don't know its chroot synopsis, so I've got nothing to comment on it. ] Lynn, what do you mean saying It starts multiple clamd daemons? Isn't this, by chance, the normal clamd behaviour, like in: 14528 ?S 0:03 /usr/sbin/clamd 14529 ?S 0:14 /usr/sbin/clamd 14530 ?S 0:24 /usr/sbin/clamd There are multiple (3) processes (or maybe threads) and it's normal. Sorry if I'm asking obvious questions. -- Tomasz Papszun SysAdm @ TP S.A. Lodz, Poland | And it's only [EMAIL PROTECTED] http://www.lodz.tpsa.pl/ | ones and zeros. --- This SF.Net email sponsored by: Free pre-built ASP.NET sites including Data Reports, E-commerce, Portals, and Forums are available now. Download today and enter to win an XBOX or Visual Studio .NET. http://aspnet.click-url.com/go/psa0013ave/direct;at.aspnet_072303_01/01 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
RE: [Clamav-users] Still Fighting Problem with clamd bombing out on Openbsd 3.3 w amavisd-new and postfix
Tomasz Kojm asked for core file :-) . I assume the list does not want a 12MB core dump file so I will forward it directly to Tomasz. It took me some time to figure out where the file was stored. It ended up in the root of chroot jail not the clamd working directory. PS. Please, respond _under_ the original (previous) message(s), not above them. This is basics of Netiquette. Not sure I follow this. How does one reference comments by others if I reply to the original message? Also, remove unneeded fragments of previous message(s), especially these awful commercials by SF. It's really ugly, space-wasting and hard-answerable to have all that junk nested a couple of times. Thank you. Sorry about the junk, just lazy in my haste. L. A. Duerksen Technical Manager Futureware Distributing, Inc OpenBSD 3.3 amavisd-new-20030616-p2 spamassassin 2.55 postfix-2.0.10 ClamAV version 0.60 --- This SF.Net email sponsored by: Free pre-built ASP.NET sites including Data Reports, E-commerce, Portals, and Forums are available now. Download today and enter to win an XBOX or Visual Studio .NET. http://aspnet.click-url.com/go/psa0013ave/direct;at.aspnet_072303_01/01 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
RE: [Clamav-users] Still Fighting Problem with clamd bombing out on Openbsd 3.3 w amavisd-new and postfix
From: [EMAIL PROTECTED] Oh, seems that you already tried to mail it to me and of course my server rejected it. Lynn, if you haven't an easy way of placing it on the WWW, drop me a note and I'll increase the message size limit temporarily. Your wish is my command. I have placed the clamd.core file at http://www.futurewareinc.com/download/clamd.core Any help would be appreciate. Thanks L. A. Duerksen Technical Manager Futureware Distributing, Inc OpenBSD 3.3 amavisd-new-20030616-p2 spamassassin 2.55 postfix-2.0.10 ClamAV version 0.60 --- This SF.Net email sponsored by: Free pre-built ASP.NET sites including Data Reports, E-commerce, Portals, and Forums are available now. Download today and enter to win an XBOX or Visual Studio .NET. http://aspnet.click-url.com/go/psa0013ave/direct;at.aspnet_072303_01/01 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] Still Fighting Problem with clamd bombing out on Openbsd 3.3 w amavisd-new and postfix
On Mon, 18 Aug 2003 18:08:25 +0200 Tomasz Papszun [EMAIL PROTECTED] wrote: Isn't this, by chance, the normal clamd behaviour, like in: 14528 ?S 0:03 /usr/sbin/clamd 14529 ?S 0:14 /usr/sbin/clamd 14530 ?S 0:24 /usr/sbin/clamd There are multiple (3) processes (or maybe threads) and it's normal. In most systems only a one clamd process is visible. LinuxThreads are process based, that's why you can see the threads in the process list. I'm not sure, but this feature will (probably) disappear in the new kernel. Best regards, Tomasz Kojm -- oo. [EMAIL PROTECTED] (\/)\. http://www.konarski.edu.pl/~zolw \..._ I nie zapomnij kliknac w brzuszek... //\ /\\ - C. Amboinensiswww.pajacyk.pl --- This SF.Net email sponsored by: Free pre-built ASP.NET sites including Data Reports, E-commerce, Portals, and Forums are available now. Download today and enter to win an XBOX or Visual Studio .NET. http://aspnet.click-url.com/go/psa0013ave/direct;at.aspnet_072303_01/01 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
