Re: [Clamav-users] 0.88.7 possible error
Robert Isaac wrote: Yesterday I installed 0.88.7 on our server running RHESL-4 using the rpms from DAG, previously using 0.88.6. Our LogWatch file this morning shows: **Unmatched Entries** clamd shutdown succeeded clamd shutdown failed clamd daemon 0.88.7 (OS: linux-gnu, ARCH: i386, CPU: i386) Bound to address 127.0.0.1 on port 3310 Portable Executable support enabled. Detection of broken executables enabled. clamd startup succeeded Mail: Recursion level limit set to 64. HTML support enabled. clamd daemon 0.88.7 (OS: linux-gnu, ARCH: i386, CPU: i386) bind() error: Address already in use Is there a problem here somewhere? Thanks ___ Robert Isaac Director/Web Admin Volvo Owners Club Did you stop the old clamd server before starting the new one? Steve ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html
Re: [Clamav-users] 0.88.7 possible error
[EMAIL PROTECTED] wrote: Robert Isaac wrote: Yesterday I installed 0.88.7 on our server running RHESL-4 using the rpms from DAG, previously using 0.88.6. Our LogWatch file this morning shows: **Unmatched Entries** clamd shutdown succeeded clamd shutdown failed Oops, look at that, it didnt shutdown. clamd daemon 0.88.7 (OS: linux-gnu, ARCH: i386, CPU: i386) Bound to address 127.0.0.1 on port 3310 Portable Executable support enabled. Detection of broken executables enabled. clamd startup succeeded Mail: Recursion level limit set to 64. HTML support enabled. clamd daemon 0.88.7 (OS: linux-gnu, ARCH: i386, CPU: i386) bind() error: Address already in use Of course the address is already in use. Clamd is still running. -Jim ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html
RE: [Clamav-users] 0.88.7 possible error
> -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of > [EMAIL PROTECTED] > Sent: 13 December 2006 18:55 > To: ClamAV users ML > Subject: Re: [Clamav-users] 0.88.7 possible error > > Robert Isaac wrote: > > Yesterday I installed 0.88.7 on our server running RHESL-4 > using the > > rpms from DAG, previously using 0.88.6. Our LogWatch file > this morning shows: > > > > **Unmatched Entries** > > clamd shutdown succeeded > > clamd shutdown failed > > clamd daemon 0.88.7 (OS: linux-gnu, ARCH: i386, CPU: i386) Bound to > > address > > 127.0.0.1 on port 3310 Portable Executable support enabled. > > Detection of broken executables enabled. > > clamd startup succeeded > > Mail: Recursion level limit set to 64. > > HTML support enabled. > > clamd daemon 0.88.7 (OS: linux-gnu, ARCH: i386, CPU: i386) > > bind() error: Address already in use > > > > Is there a problem here somewhere? Thanks > > > > Did you stop the old clamd server before starting the new one? > > Steve > ___ No I didn't. Ooops. What should I do now? Bob ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html
Re: [Clamav-users] 0.88.7 possible error
Robert Isaac wrote: -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: 13 December 2006 18:55 To: ClamAV users ML Subject: Re: [Clamav-users] 0.88.7 possible error Robert Isaac wrote: Yesterday I installed 0.88.7 on our server running RHESL-4 using the rpms from DAG, previously using 0.88.6. Our LogWatch file this morning shows: **Unmatched Entries** clamd shutdown succeeded clamd shutdown failed clamd daemon 0.88.7 (OS: linux-gnu, ARCH: i386, CPU: i386) Bound to address 127.0.0.1 on port 3310 Portable Executable support enabled. Detection of broken executables enabled. clamd startup succeeded Mail: Recursion level limit set to 64. HTML support enabled. clamd daemon 0.88.7 (OS: linux-gnu, ARCH: i386, CPU: i386) bind() error: Address already in use Is there a problem here somewhere? Thanks Did you stop the old clamd server before starting the new one? Steve ___ No I didn't. Ooops. What should I do now? Bob Just kill all instances of clamd and then start up clamd again. Steve ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html
RE: [Clamav-users] 0.88.7 possible error
> -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of > [EMAIL PROTECTED] > Sent: 13 December 2006 21:13 > To: ClamAV users ML > Subject: Re: [Clamav-users] 0.88.7 possible error > > Robert Isaac wrote: > >> -Original Message- > >> From: [EMAIL PROTECTED] > >> [mailto:[EMAIL PROTECTED] On Behalf Of > >> [EMAIL PROTECTED] > >> Sent: 13 December 2006 18:55 > >> To: ClamAV users ML > >> Subject: Re: [Clamav-users] 0.88.7 possible error > >> > >> Robert Isaac wrote: > >>> Yesterday I installed 0.88.7 on our server running RHESL-4 > >> using the > >>> rpms from DAG, previously using 0.88.6. Our LogWatch file > >> this morning shows: > >>> **Unmatched Entries** > >>> clamd shutdown succeeded > >>> clamd shutdown failed > >>> clamd daemon 0.88.7 (OS: linux-gnu, ARCH: i386, CPU: > i386) Bound to > >>> address > >>> 127.0.0.1 on port 3310 Portable Executable support enabled. > >>> Detection of broken executables enabled. > >>> clamd startup succeeded > >>> Mail: Recursion level limit set to 64. > >>> HTML support enabled. > >>> clamd daemon 0.88.7 (OS: linux-gnu, ARCH: i386, CPU: i386) > >>> bind() error: Address already in use > >>> > >>> Is there a problem here somewhere? Thanks > >>> > >> Did you stop the old clamd server before starting the new one? > >> > >> Steve > >> ___ > > > > > > No I didn't. Ooops. What should I do now? > > > > Bob > > > > > > Just kill all instances of clamd and then start up clamd again. > > Steve > There was only one instance running. Killed it and restarted it. Then in today's LogWatch: **Unmatched Entries** clamd shutdown failed clamd daemon 0.88.7 (OS: linux-gnu, ARCH: i386, CPU: i386) Bound to address 127.0.0.1 on port 3310 clamd startup succeeded Portable Executable support enabled. Detection of broken executables enabled. Mail: Recursion level limit set to 64. HTML support enabled. Bob ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html
Re: [Clamav-users] 0.88.7 possible error
Robert Isaac wrote: -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: 13 December 2006 21:13 To: ClamAV users ML Subject: Re: [Clamav-users] 0.88.7 possible error Robert Isaac wrote: -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: 13 December 2006 18:55 To: ClamAV users ML Subject: Re: [Clamav-users] 0.88.7 possible error Robert Isaac wrote: Yesterday I installed 0.88.7 on our server running RHESL-4 using the rpms from DAG, previously using 0.88.6. Our LogWatch file this morning shows: **Unmatched Entries** clamd shutdown succeeded clamd shutdown failed clamd daemon 0.88.7 (OS: linux-gnu, ARCH: i386, CPU: i386) Bound to address 127.0.0.1 on port 3310 Portable Executable support enabled. Detection of broken executables enabled. clamd startup succeeded Mail: Recursion level limit set to 64. HTML support enabled. clamd daemon 0.88.7 (OS: linux-gnu, ARCH: i386, CPU: i386) bind() error: Address already in use Is there a problem here somewhere? Thanks Did you stop the old clamd server before starting the new one? Steve ___ No I didn't. Ooops. What should I do now? Bob Just kill all instances of clamd and then start up clamd again. Steve There was only one instance running. Killed it and restarted it. Then in today's LogWatch: **Unmatched Entries** clamd shutdown failed I already pointed this out, but perhaps its worth repeating. Whatever script is trying to shutdown clamd is failing. You need to figure out why this is happening. If clamd does not shut down correctly, it will ALWAYS fail when trying to start it back up. Killing it manually is not a fix, its a workaround. clamd daemon 0.88.7 (OS: linux-gnu, ARCH: i386, CPU: i386) Bound to address 127.0.0.1 on port 3310 clamd startup succeeded Portable Executable support enabled. Detection of broken executables enabled. Mail: Recursion level limit set to 64. HTML support enabled. Bob ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html
Re: [Clamav-users] 0.88.7 possible error
Robert Isaac wrote: There was only one instance running. Killed it and restarted it. Then in today's LogWatch: **Unmatched Entries** clamd shutdown failed clamd daemon 0.88.7 (OS: linux-gnu, ARCH: i386, CPU: i386) Bound to address 127.0.0.1 on port 3310 clamd startup succeeded Portable Executable support enabled. Detection of broken executables enabled. Mail: Recursion level limit set to 64. HTML support enabled. So what is the problem? It looks like it started ok. I am thinking that your script is saying "clamd shutdown failed" because you told the script to restart instead of start after you had already killed the process. I guess the question boils down to is this: Is it working? Steve ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html
Re: [Clamav-users] 0.88.7 possible error
Robert Isaac wrote: There was only one instance running. Killed it and restarted it. Then in today's LogWatch: **Unmatched Entries** clamd shutdown failed clamd daemon 0.88.7 (OS: linux-gnu, ARCH: i386, CPU: i386) Bound to address 127.0.0.1 on port 3310 clamd startup succeeded Portable Executable support enabled. Detection of broken executables enabled. Mail: Recursion level limit set to 64. HTML support enabled. Bob Did you happen to notice if the PID of the new process was different than the earlier PID? Is the PID of the current process the same as in the clamav.pid file as defined by the clamd.conf PidFile definition? The reason I ask is that sometimes this location gets changed between the startup/shutdown script and the clamd.conf script and the script tries to kill the wrong process, or can't find a process identified in the clamav.pid file. Just a thought. In any event, check the script and clamd.conf to be sure they're both looking at the same pid file. dp ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html
RE: [Clamav-users] 0.88.7 possible error
> -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of > Dennis Peterson > Sent: 15 December 2006 00:52 > To: ClamAV users ML > Subject: Re: [Clamav-users] 0.88.7 possible error > > Robert Isaac wrote: > > > > > There was only one instance running. Killed it and > restarted it. Then > > in today's LogWatch: > > > > **Unmatched Entries** > > clamd shutdown failed > > clamd daemon 0.88.7 (OS: linux-gnu, ARCH: i386, CPU: i386) Bound to > > address > > 127.0.0.1 on port 3310 clamd startup succeeded Portable Executable > > support enabled. > > Detection of broken executables enabled. > > Mail: Recursion level limit set to 64. > > HTML support enabled. > > > > Bob > > Did you happen to notice if the PID of the new process was > different than the earlier PID? Is the PID of the current > process the same as in the clamav.pid file as defined by the > clamd.conf PidFile definition? The reason I ask is that > sometimes this location gets changed between the > startup/shutdown script and the clamd.conf script and the > script tries to kill the wrong process, or can't find a > process identified in the clamav.pid file. Just a thought. In > any event, check the script and clamd.conf to be sure they're > both looking at the same pid file. > > dp I uninstalled then reinstalled the rpms hoping that would resolve things, but no. This was today's LogWatch: **Unmatched Entries** clamd shutdown succeeded clamd shutdown failed clamd shutdown failed clamd daemon 0.88.7 (OS: linux-gnu, ARCH: i386, CPU: i386) Bound to address 127.0.0.1 on port 3310 Portable Executable support enabled. Detection of broken executables enabled. clamd startup succeeded Mail: Recursion level limit set to 64. HTML support enabled. There is only one PID and that is correct, I don't recall if it is different from 0.88.6. Only one clamd process running. The path to clamav.pid is correct in clamd.conf. I am running out of ideas and might revert to 0.88.6 to see what happens. Bob ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html