I'm on a Mandrake 9.1 system using clamav-milter with sendmail and about
once a day I find the following:
1) Clamd has died and left itself like this
6162 ? S 0:00 /usr/local/sbin/clamd LESSKEY=/etc/.less LC_MONETARY=
6166 ? Z 0:00 \_ [clamd <defunct>]
6167 ? S 0:00 /usr/local/sbin/clamd LESSKEY=/etc/.less LC_MONETARY=
instead of the normal
24655 ? S 0:00 /usr/local/sbin/clamd LESSKEY=/etc/.less LC_MONETARY=
24659 ? S 0:00 \_ /usr/local/sbin/clamd LESSKEY=/etc/.less LC_MONET
24667 ? S 0:00 \_ /usr/local/sbin/clamd LESSKEY=/etc/.less LC_M
2) Sendmail is rejecting all incoming mail
Sep 2 21:54:40 mxa sendmail[24476]: h834nenC024476: Milter (clmilter): to error state
3) The clamd log file shows the following about 6:30, the time I think it died. I
caught it at about 10:00 and restarted everything.
Tue Sep 2 18:19:19 2003 -> SelfCheck: Database status OK.
Tue Sep 2 18:19:19 2003 -> SelfCheck: Integrity OK
Tue Sep 2 18:33:58 2003 -> Session 0 stopped due to timeout.
Tue Sep 2 18:35:15 2003 -> Session 1 stopped due to timeout.
Tue Sep 2 19:19:55 2003 -> SelfCheck: Database status OK.
Tue Sep 2 19:19:55 2003 -> SelfCheck: Integrity OK
Tue Sep 2 20:20:31 2003 -> SelfCheck: Database status OK.
Tue Sep 2 20:20:31 2003 -> SelfCheck: Integrity OK
Tue Sep 2 21:21:07 2003 -> SelfCheck: Database status OK.
Tue Sep 2 21:21:07 2003 -> SelfCheck: Integrity OK
Tue Sep 2 21:55:49 2003 -> Signal 15 caught -> exiting.
Tue Sep 2 21:55:49 2003 -> Freeing trie structure.
Tue Sep 2 21:55:49 2003 -> Shutting down main socket.
Tue Sep 2 21:55:49 2003 -> Closing main socket.
Tue Sep 2 21:55:49 2003 -> Socket file removed.
Tue Sep 2 21:55:49 2003 -> Exit level 2, ThreadWatcher termination.
Tue Sep 2 21:55:49 2003 -> --- Stopped at Tue Sep 2 21:55:49 2003
I'm not finding a core file anyplace, and over the weekend I pulled the latest
version from CVS to catch any patches that had been made. It's been a little more
stable since then, but tonight it failed again.
Any suggestions on how to narrow down the problem? Can a debug log be turned on
to get a better idea where it's failing, or can I force a core file somehow when
it's sitting in that half defunct state?
--
(UniKyrn on IM, ICQ#27068798)
Brian W. Antoine briana @ dogear|circuit .com
http://www.nas-kan.org/
-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users
