I'm working with QmailToaster Virtual Appliance (CentOS 4.4) and I had same
problem. After reading the Thread and updated the packages with those in devel
branch I solved the question! Thanks!
Byez
Davide
It wasn't that hard. The hard work was done by the ClamAV group.
Erik
On 3/5/07, Peter Peltonen <[EMAIL PROTECTED]> wrote:
I'll mention at this thread too, that upgrading to
clamav-toaster-0.90.1-1.3.11 from the
devel site seemed to fix my problems.
Consider this long thread closed :) Thanks f
I'll mention at this thread too, that upgrading to
clamav-toaster-0.90.1-1.3.11 from the
devel site seemed to fix my problems.
Consider this long thread closed :) Thanks for ES and EE for working
so hard to get this issue
solved.
Cheers,
Peter
---
Regarding duplicated clamd log messages, the fix is to comment out "LogFile
stderr" in /etc/clamd.conf (and stop/start). EE will be releasing a fixed
toaster version very soon that does this and also removes the stderr patch.
I can't speak to the other issues.
A M wrote:
> Hi all,
>
> I've watch
Hi all,
I've watching clamd 0.90 for some time and found a few strange things:
every line in the logs are duplicated (wonder if this has something to do
with new clamd logging support for syslog and a log file?)
in 64bits system (Intel) clamd crashes quite often (haven't had that
problem in AMD
On 2/28/07, Philip Nix Guru <[EMAIL PROTECTED]> wrote:
Hi Peter
32645 is the only pid you should see
did you by any chance try to rebuild the rpm ?
Yes Pentium D, Core Duo and Xenon 5130 machines all with smp kernels
What's your distrib Peter (sorry if you already mentioned it :))
I have not
Hi Peter
32645 is the only pid you should see
did you by any chance try to rebuild the rpm ?
Yes Pentium D, Core Duo and Xenon 5130 machines all with smp kernels
What's your distrib Peter (sorry if you already mentioned it :))
Peter Peltonen wrote:
On 2/28/07, Peter Peltonen <[EMAIL PROTECTED
On 2/28/07, Peter Peltonen <[EMAIL PROTECTED]> wrote:
After enabling clamav for one domain and sending an email with
attachment to it I see:
PID USER PRI NI SIZE RSS SHARE STAT %CPU %MEM TIME CPU COMMAND
17742 clamav25 0 47588 42M 1444 R50.1 4.2 1:00 1 clamd
20466 clam
Hi,
On 2/28/07, Philip <[EMAIL PROTECTED]> wrote:
Try launching a top -u clamav
you should have 1 clamd, 1 freshclam, a few spamc and multiple simscan
commands
clamd and freshclam should have the same PID while you monitor with top
This is what I get. I follow user clamav's processes in top a
Hi
The pid of your clamd (user clamav) shouldnt change and be listed as
21988 (in your exemple)
as long as you dont restart it of course, and nothign else
I have fc5 and centos4.4 boxes
on very busy machines. I dont have those problems at all
Try launching a top -u clamav
you should have 1 cl
This is what me and Eric found out yesterday:
If we start my toaster with clamav scanning one domain and feed it a
message with an attachment, we get a "phantom" clamd processes eating
all of my p4 2,8GHz HT CPU. Example:
Top shows:
PID USER PRI NI SIZE RSS SHARE STAT %CPU %MEM TIME CPU
Hey Peter,
How'd it go today? Ready to try adding more domains to clamav?
Let's chat at #QmailToaster.
Peter Peltonen wrote:
> After a restart last evening I've now kept my clamav running over the
> night scanning one
> domain only. Everything seems to be ok and no strange processes visible:
>
>
After a restart last evening I've now kept my clamav running over the
night scanning one
domain only. Everything seems to be ok and no strange processes visible:
$ ps ax |grep clam
26991 pts/2S 0:00 supervise clamd
26999 pts/2S 0:00 /usr/bin/multilog t s100 n100
/var/log/qma
gt; ____________
>
> De: Eric "Shubes" [mailto:[EMAIL PROTECTED]
> Enviada: seg 26-02-2007 18:22
> Para: qmailtoaster-list@qmailtoaster.com
> Assunto: Re: [qmailtoaster] clamav upgrade problem with supervise/lock
>
>
>
> Hey FA,
>
> Are you
________
>
> De: Eric "Shubes" [mailto:[EMAIL PROTECTED]
> Enviada: seg 26-02-2007 18:22
> Para: qmailtoaster-list@qmailtoaster.com
> Assunto: Re: [qmailtoaster] clamav upgrade problem with supervise/lock
>
>
>
> Hey FA,
>
> Are you seeing
check if this is not just a conf file problem and I
will report ASAP.
Fernando
De: Eric "Shubes" [mailto:[EMAIL PROTECTED]
Enviada: seg 26-02-2007 18:22
Para: qmailtoaster-list@qmailtoaster.com
Assunto: Re: [qmailtoaster] clamav upgrade problem wi
Good news: I found out why messages are being duplicated.
The new output.c module in clamav has a new logg_foreground setting (enabled
in the toaster) which sends log output to stdout. The toaster used to use a
patched capability (still in there) which allows for specifying "stderr" as
the log fil
nf file problem and I
will report ASAP.
Fernando
De: Eric "Shubes" [mailto:[EMAIL PROTECTED]
Enviada: seg 26-02-2007 18:22
Para: qmailtoaster-list@qmailtoaster.com
Assunto: Re: [qmailtoaster] clamav upgrade problem with supervise/lock
He
Thanks, slamp.
Me too. I'd love to hear some suggestions, even if they're just SWAGs!
slamp slamp wrote:
> I have clamav-toaster-0.90-1.3.10 with no problems either. this was an
> upgrade from the rc. but i do see duplicates in my log. the oldest i
> have for logs are from 2/14. i am curious as t
I have clamav-toaster-0.90-1.3.10 with no problems either. this was an
upgrade from the rc. but i do see duplicates in my log. the oldest i have
for logs are from 2/14. i am curious as to why the logs are duplicated.
On 2/26/07, Philip Nix Guru <[EMAIL PROTECTED]> wrote:
Eric "Shubes" wrote:
>
Eric "Shubes" wrote:
Philip Nix Guru wrote:
Eric "Shubes" wrote:
Philip Nix Guru wrote:
Eric "Shubes" wrote:
Philip Nix Guru wrote:
Eric "Shubes" wrote:
We're trying to get a handle on this problem. If anyone is using
That would be a "yes". ;)
Glenn Remstedt wrote:
> a output from my /var/log/qmail/clamd/current
>
> .
> .
> .
>
> @400045e2d66333c0c974
> /var/qmail/simscan/1172493913.298866.2941/textfile1:OK
> @400045e2fccb37f785b4 No stats for Database check - forcing reload
> @400045e2fccb37f80e
Hey FA,
Are you seeing any duplicate messages in your clamd log?
Is your volume of messages very high?
Thanks.
Fernando Azevedo wrote:
> Hi list,
>
> Hope this is of help:
>
> [EMAIL PROTECTED] ~]#
> [EMAIL PROTECTED] ~]#
> [EMAIL PROTECTED] ~]#
> [EMAIL PROTECTED] ~]# rpm -qa | grep toas
Philip Nix Guru wrote:
> Eric "Shubes" wrote:
>> Philip Nix Guru wrote:
>>
>>> Eric "Shubes" wrote:
>>>
Philip Nix Guru wrote:
> Eric "Shubes" wrote:
>
>> We're trying to get a handle on this problem. If anyone is using
>> clamav-toaster-0.90-
Para: qmailtoaster-list@qmailtoaster.com
Assunto: Re: [qmailtoaster] clamav upgrade problem with supervise/lock
Eric "Shubes" wrote:
> Philip Nix Guru wrote:
>
>> Eric "Shubes" wrote:
>>
>>> Philip Nix Guru wrote:
>>>
>>>
>
a output from my /var/log/qmail/clamd/current
.
.
.
@400045e2d66333c0c974 /var/qmail/simscan/1172493913.298866.2941/textfile1:OK
@400045e2fccb37f785b4 No stats for Database check - forcing reload
@400045e2fccb37f80e6c No stats for Database check - forcing reload
@400045e2fccb37f81
Eric "Shubes" wrote:
Philip Nix Guru wrote:
Eric "Shubes" wrote:
Philip Nix Guru wrote:
Eric "Shubes" wrote:
We're trying to get a handle on this problem. If anyone is using
clamav-toaster-0.90-1.3.10 and is *not* experiencing a problem, will
you
kindly reply and
Thanks Glenn.
Any duplicated messages in the clamd log?
Glenn Remstedt wrote:
> hi,
>
> I've the clamav-toaster-0.90-1.3.10 just installed yesterday on a FC5,
> do not see any problem. But do let me know what you need to see - any
> log-files ...?
>
> G.
>
> On Mon, 2007-02-26 at 10:01 -0700,
hi,
I've the clamav-toaster-0.90-1.3.10 just installed yesterday on a FC5,
do not see any problem. But do let me know what you need to see - any
log-files ...?
G.
On Mon, 2007-02-26 at 10:01 -0700, Eric "Shubes" wrote:
> We're trying to get a handle on this problem. If anyone is using
> clamav-
Philip Nix Guru wrote:
> Eric "Shubes" wrote:
>> Philip Nix Guru wrote:
>>
>>> Eric "Shubes" wrote:
>>>
We're trying to get a handle on this problem. If anyone is using
clamav-toaster-0.90-1.3.10 and is *not* experiencing a problem, will
you
kindly reply and let us know?
>
Eric "Shubes" wrote:
Philip Nix Guru wrote:
Eric "Shubes" wrote:
We're trying to get a handle on this problem. If anyone is using
clamav-toaster-0.90-1.3.10 and is *not* experiencing a problem, will you
kindly reply and let us know?
Thanks.
Hello
I am using clamav-toaster-
Philip Nix Guru wrote:
> Eric "Shubes" wrote:
>> We're trying to get a handle on this problem. If anyone is using
>> clamav-toaster-0.90-1.3.10 and is *not* experiencing a problem, will you
>> kindly reply and let us know?
>>
>> Thanks.
>>
>>
> Hello
> I am using clamav-toaster-0.90-1.3.10 on 3
Eric "Shubes" wrote:
We're trying to get a handle on this problem. If anyone is using
clamav-toaster-0.90-1.3.10 and is *not* experiencing a problem, will you
kindly reply and let us know?
Thanks.
Hello
I am using clamav-toaster-0.90-1.3.10 on 3 diff systems
2 x FC5 and 1 x Centos 4.4
No p
We're trying to get a handle on this problem. If anyone is using
clamav-toaster-0.90-1.3.10 and is *not* experiencing a problem, will you
kindly reply and let us know?
Thanks.
--
-Eric 'shubes'
-
QmailToaster hosted by: VR
Peter Peltonen wrote:
> On 2/26/07, Eric Shubes <[EMAIL PROTECTED]> wrote:
>> Any news on your situation? Can you tell if the scans that hung up were
>> incoming or outgoing?
>
> I have no idea. I can switch my clamd back on, so we can find out. But
> how do I get more information about the scans
Peter Peltonen wrote:
> BTW: Maybe `service qmail restart` should sighup *all* the
> qmailtoaster related processes?
I've often thought the same thing.
> Is there a reason it does not do so at the moment?
I don't honestly know why it is done the way it is. I'd like to see some
enhancements done
On 2/26/07, Eric Shubes <[EMAIL PROTECTED]> wrote:
Any news on your situation? Can you tell if the scans that hung up were
incoming or outgoing?
I have no idea. I can switch my clamd back on, so we can find out. But
how do I get more information about the scans that are hanging?
Regards,
Peter
On 2/26/07, Eric Shubes <[EMAIL PROTECTED]> wrote:
Thanks for the report, Peter. I'm sure it'll help with tracking this problem
down.
You are welcome.
Restarting qmail (via qmailctl restart or service qmail restart, they're the
same thing) does not restart *everything*. It only recycles qmail
Peter (and others with this problem),
I've done some testing on the new toaster I just built. The only symptom
I've seen is the duplicated clamd log messages. Inbound messages have
scanned ok, and clamdscan terminated normally (afaict).
Any news on your situation? Can you tell if the scans that h
Peter,
One more thing. If at all possible, it'd be great if you could refrain from
backing off the update for a little bit. That way if the fix ends up being a
relatively simply tweak, we'll have a machine to try it out on right away.
Thanks.
--
-Eric 'shubes'
-
Thanks for the report, Peter. I'm sure it'll help with tracking this problem
down.
A few thoughts come to mind (first thing in the morning, so I hope I'm awake!):
Restarting qmail (via qmailctl restart or service qmail restart, they're the
same thing) does not restart *everything*. It only recycl
On 2/26/07, Peter Peltonen <[EMAIL PROTECTED]> wrote:
At 12:50 the situation is: 8 clamdscan processes eating 100 % cpu
I notice that freshclam is not running:
# service freshclam status
freshclam dead but subsys locked
All I see in freshclam log are messages like this:
Received signal: wake
At 12:50 the situation is: 8 clamdscan processes eating 100 % cpu
I notice that freshclam is not running:
# service freshclam status
freshclam dead but subsys locked
All I see in freshclam log are messages like this:
Received signal: wake up
ClamAV update process started at Mon Feb 26 10:40:41
After restart I have now experienced that clamd processes are eating
up all CPU (2,8GHz HT P4):
PID USER PRI NI SIZE RSS SHARE STAT %CPU %MEM TIME CPU COMMAND
1321 clamav25 0 49292 46M 1616 R30.1 4.7 2:08 0 clamd
31064 clamav25 0 49292 46M 1616 R29.1 4.7 13
I seem to have similiar problems with the new clamav which I've been
running for a few days now. This morning I found out that my mail
server was not responding: no new emails came through, and nothing was
in smtp logs.
When checking process list, I saw tens and tens of clamav processes like this
I believe there are. And the simscan/clamav pairs seem to be
multiplying as a new check of processes returns:
vpopmail 2870 0.0 0.1 6468 1340 ?SFeb25 0:00
/var/qmail/bin/qmail-smtpd /home/vpopmail/bin/vchkpw /bin/true
clamav2892 0.0 0.0 1800 644 ?SFeb2
These almost-duplicate messages indeed look odd. I don't have them in an
older clamav-toaster version, but I do see them in a new toaster I just
built. I can't get into it any more tonight, but will be looking into it
first thing tomorrow. There appears to be some sort of problem with the
latest cl
Some of these simscan/clamav pairs seem to not be terminating normally. Are
there any smtp processes still active too (which would correspond to the
still-active simscans)?
Erik Grammer wrote:
> Thought this might be useful... a list of the clamd/clamav processes
> currently running:
>
> root
Thought this might be useful... a list of the clamd/clamav processes
currently running:
root 2188 0.0 0.0 1420 236 ?S19:31 0:00
supervise clamd
clamav2196 94.9 4.6 93948 47820 ?Sl 19:31 116:18
/usr/sbin/clamd
qmaill2206 0.0 0.0 1432 244 ?
Here is a snippet that suggests to me that there are multiple clamd
processes running but I don't know how to get rid of the duplicate (if
in fact that is the problem.) I feel out of my league here and
appreciate the help!
clamd log:
+++ Started at Sun Feb 25 19:11:35 2007
@400045e24ff
Does clamd log show anything?
Erik Grammer wrote:
> When I reboot the server and then run: ps -el | grep 'Z' I get nothing.
>I have to stop, then start qmail to replicate the problem. Then I get-
>
> ps -el | grep 'Z' returns:
> F S UID PID PPID C PRI NI ADDR SZ WCHAN TTY
When I reboot the server and then run: ps -el | grep 'Z' I get nothing.
I have to stop, then start qmail to replicate the problem. Then I get-
ps -el | grep 'Z' returns:
F S UID PID PPID C PRI NI ADDR SZ WCHAN TTY TIME CMD
4 Z 0 3441 3391 0 81 0 - 0 exit
It sounds like you have a zombie clamd running. If pid 3282 is still
running, kill it, and supervise should start it back up again.
If it doesn't restart on its own, bring down qmail, check for any zombies,
then restart qmail.
HTH.
Erik Grammer wrote:
> Hi all,
>
> Running fully updated toaster
53 matches
Mail list logo
