Re: clamd dies periodically

Hi Tim, 

That's my favorite platform too. I reinstalled clamav from
sources this
morning. Seems to be running without dying. The only thing
that disturbs me
are these entries to log:

Dec 12 11:14:24 mail02 amavis[43157]: (43157-01)
ClamAV-clamd: Can't connect
to UNIX socket /var/run/clamav
/clamd: No such file or directory, retrying (1)

Dec 12 11:14:24 mail02 postfix/smtpd[41131]: disconnect
from
host71-183-dynamic.18-79-r.retail.telecomitali
a.it[79.18.183.71]

Dec 12 11:14:25 mail02 amavis[43157]: (43157-01)
ClamAV-clamd: Can't connect
to UNIX socket /var/run/clamav
/clamd: No such file or directory, retrying (2)

I have matching entries in the clamv.conf and amavisd.conf
file for the
LocalSocket file and both clamd and amavisd run as the same
user. Strange,
at the same time the clamav seems to be working. I tried to
sent the test
signature for Eicar virus. It was discovered and put to
maia's virus cache.

Eugene

-----Original Message-----
From: maia-users-bouncesrenaissoft.com
[mailto:maia-users-bouncesrenaissoft.com] On Behalf
Of Tim Palmer
Sent: Wednesday, December 12, 2007 2:22 PM
To: Maia-Users
Subject: Re: [Maia-users] clamd dies periodically

Darrick Hartman wrote:
> Eugene Pefti wrote:
>   
>> Hi Derrick,
>>
>> You suggestion to increase debugging level makes
sense. Should I enable
it
>> in this directive of clamd.conf file:
>>
>> # Enable debug messages in libclamav.
>>
>> # Default: no
>>
>> #Debug yes
>>
>> Where will the debugging information be written in
this case? To
clamd.log
>> configured in clamd.conf ?
>>     
>
> I believe that's where it would go.
>
>   
>> As for freshclam I don't have anything in the
crontab calling it. Should
it
>> be there?
>>     
>
> Look in /etc/cron.daily
>
> on CentOS (and perhaps other distros) there are several
tasks that 
> happen daily and are stored here.  Basically any script
that is in that 
> directory will be run by the cron daemon on a daily
basis.
>
>   
Freshclam can also be run as a daemon, so it may not appear 
in any 
crontabs. I've had a few cases of freshclam dumping core,
and once where 
both freshclam and clamd died, since recently upgrading to
the current 
version of clamav. I'm on Freebsd, so my experience may not
be relevant 
to you Linux folks.
_______________________________________________
Maia-users mailing list
Maia-usersrenaissoft.com
http://www.renaissoft.com/mailman/listinfo/maia-users

_______________________________________________
Maia-users mailing list
Maia-usersrenaissoft.com
http://www.renaissoft.com/mailman/listinfo/maia-users

Eugene Pefti wrote:
> Hi Tim, 
>
> That's my favorite platform too. I reinstalled clamav
from sources this
> morning. Seems to be running without dying. The only
thing that disturbs me
> are these entries to log:
>
> Dec 12 11:14:24 mail02 amavis[43157]: (43157-01)
ClamAV-clamd: Can't connect
> to UNIX socket /var/run/clamav
> /clamd: No such file or directory, retrying (1)
>
> Dec 12 11:14:24 mail02 postfix/smtpd[41131]: disconnect
from
> host71-183-dynamic.18-79-r.retail.telecomitali
> a.it[79.18.183.71]
>
> Dec 12 11:14:25 mail02 amavis[43157]: (43157-01)
ClamAV-clamd: Can't connect
> to UNIX socket /var/run/clamav
> /clamd: No such file or directory, retrying (2)
>
> I have matching entries in the clamv.conf and
amavisd.conf file for the
> LocalSocket file and both clamd and amavisd run as the
same user. Strange,
> at the same time the clamav seems to be working. I
tried to sent the test
> signature for Eicar virus. It was discovered and put to
maia's virus cache.
>
> Eugene
>
> -----Original Message-----
> From: maia-users-bouncesrenaissoft.com
> [mailto:maia-users-bouncesrenaissoft.com] On Behalf
Of Tim Palmer
> Sent: Wednesday, December 12, 2007 2:22 PM
> To: Maia-Users
> Subject: Re: [Maia-users] clamd dies periodically
>
> Darrick Hartman wrote:
>   
>> Eugene Pefti wrote:
>>   
>>     
>>> Hi Derrick,
>>>
>>> You suggestion to increase debugging level
makes sense. Should I enable
>>>       
> it
>   
>>> in this directive of clamd.conf file:
>>>
>>> # Enable debug messages in libclamav.
>>>
>>> # Default: no
>>>
>>> #Debug yes
>>>
>>> Where will the debugging information be written
in this case? To
>>>       
> clamd.log
>   
>>> configured in clamd.conf ?
>>>     
>>>       
>> I believe that's where it would go.
>>
>>   
>>     
>>> As for freshclam I don't have anything in the
crontab calling it. Should
>>>       
> it
>   
>>> be there?
>>>     
>>>       
>> Look in /etc/cron.daily
>>
>> on CentOS (and perhaps other distros) there are
several tasks that 
>> happen daily and are stored here.  Basically any
script that is in that 
>> directory will be run by the cron daemon on a daily
basis.
>>
>>   
>>     
> Freshclam can also be run as a daemon, so it may not
appear  in any 
> crontabs. I've had a few cases of freshclam dumping
core, and once where 
> both freshclam and clamd died, since recently upgrading
to the current 
> version of clamav. I'm on Freebsd, so my experience may
not be relevant 
> to you Linux folks.
> _______________________________________________
> Maia-users mailing list
> Maia-usersrenaissoft.com
> http://www.renaissoft.com/mailman/listinfo/maia-users
>
>
>   
Hi Eugene - sorry - if I top post, various parts of my body
fly off 
uncontrollably...

That certainly looks like its not talking to its socket. Are
you sure 
mail is going through clamd? If it were me, I would apply
Tim's 
Troubleshooting Rule #1 - "Its your fault, stupid"
- meaning, I've found 
more problems caused by something I
missed/overlooked/checked wrong 
(however many times) - and go over the configs, permissions,
and turn 
debugging up, looking for "/clamd" somewhere it
shouldn't be.

tim

_______________________________________________
Maia-users mailing list
Maia-usersrenaissoft.com
http://www.renaissoft.com/mailman/listinfo/maia-users