At startup initialization a clamd->ping() is done using the defined socket. This is done before any user and/or group switching on nix systems - eg. in case the error is permission related!
>Unknown reponse from ClamAV service: unable to read from Socket
The MainThread was able to write "PING\n" to the socket - but has'nt got
any answer - in case the socket never became readable within the defined
timeout (or 2 seconds)
If clamd can't be reached, assp tries to recover the clamd-connection the
next time, such a connection is required (in each Worker).
But even any of the next connections is successfull in a Worker, the
startup error is not cleared and still shown in the GUI.
>I changed ScanLog
In Standard-Mode of ScanLog, only warnings and error are logged.
Thomas
Von: "Farokh" <far...@besttechsvc.com>
An: assp-user@lists.sourceforge.net
Datum: 28.01.2025 17:13
Betreff: Re: [Assp-user] ClamAV not being called?
So, it appears to be working. I changed ScanLog to verbose and I see
entries in the log file like "ClamAV: scanned 3583 bytes in message - OK"
However, if I go to the assp server info page, and open up the perl
modules list, I see the following:
File::Scan::ClamAV 1.95 / 1.93 Unknown reponse from ClamAV service:
unable to read from Socket
I have a small test perl program that works:
use File::Scan::ClamAV;
use Data::Dumper;
my $av = File::Scan::ClamAV->new(port => '/run/clamav/clamd.ctl', find_all
=> 1);
if ($av->ping) {
print "ClamAV connection successful!\n";
} else {
print "Error connecting to ClamAV daemon!\n";
}
%caught = $av->scan('/home/farokh');
print Dumper(\%caught);
and that results in:
ClamAV connection successful!
$VAR1 = {
'/home/farokh/.cpan/build/File-Scan-ClamAV-1.95-0/testfiles/clamavtest' =>
'Win.Test.EICAR_HDB-1',
'/home/farokh/virus.txt' => 'Win.Test.EICAR_HDB-1',
'/home/farokh/.cpan/build/File-Scan-ClamAV-1.95-1/testfiles/clamavtest' =>
'Win.Test.EICAR_HDB-1',
'/home/farokh/.cpan/sources/authors/id/E/ES/ESAYM/File-Scan-ClamAV-1.95.tar.gz'
=> 'Win.Test.EICAR_HDB-1'
};
The AvVlamdPort is set to /run/clamav/clamd.ctl and netstat shows:
unix 2 [ ACC ] STREAM LISTENING 9806
1/init /run/clamav/clamd.ctl
Any thoughts?
Thanks.
Farokh
----------------------------------------------------------------------------
Best Tech Service, LLC - When only the Best Tech will do...
For all your technology needs including hosting solutions.
Office: 845-735-0210
Cell: 914-262-1594
Like us on Facebook: https://www.facebook.com/besttechsvc
On 1/27/25 05:52, Thomas Eckardt wrote:
check the startuplog for ClamAV related lines (eg. warnings and errors)
increase the level of ScanLog
Thomas
Von: "Farokh" <far...@besttechsvc.com>
An: "For Users of ASSP" <assp-user@lists.sourceforge.net>
Datum: 25.01.2025 17:28
Betreff: [Assp-user] ClamAV not being called?
I'm trying to get ClamAV running on my ASSP machine.
I've got 1.9.5 of File::Scan::ClamAV, and it's enabled.
UseAvClamd is on.
I don't see anything being sent to ClamAV to be checked.
How can I troubleshoot?
Thanks.
--
Farokh
----------------------------------------------------------------------------
Best Tech Service, LLC - When only the Best Tech will do...
For all your technology needs including hosting solutions.
Office: 845-735-0210
Cell: 914-262-1594
Like us on Facebook: https://www.facebook.com/besttechsvc
_______________________________________________
Assp-user mailing list
Assp-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-user
_______________________________________________
Assp-user mailing list
Assp-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-user
_______________________________________________
Assp-user mailing list
Assp-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-user
smime.p7s
Description: S/MIME cryptographic signature
_______________________________________________ Assp-user mailing list Assp-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/assp-user
