Nothing like replying to yourself eh? :)
Well I found a source of the problem...
seems I'm running out of file descriptors. When I do a: lsof -p <pid of
clamd> |wc -l I'm getting over 1000. I happened to catch it when it got
up to 1000 (it is happening right now, well by the time I wrote this it
was all over :) ).
When it gets up over 1024 it starts to put this in clamd.log:
Thu Feb 26 12:43:33 2004 -> ERROR: ScanStream: accept() failed.
Thu Feb 26 12:44:12 2004 -> ERROR: ScanStream: accept() failed.
Thu Feb 26 12:45:05 2004 -> ERROR: ScanStream: Can't create temporary
file.
Thu Feb 26 12:46:38 2004 -> Session 1 stopped due to timeout.
Thu Feb 26 12:46:39 2004 -> Segmentation fault :-( Bye..
I'm running on Fedora Core 1 (forgot to mention that before). I have a
dump of lsof -p <clamd pid> for any developers interested (email me
privately).
highlights:
[EMAIL PROTECTED] root]# grep deleted lsof.out |wc -l
324
[EMAIL PROTECTED] root]# grep CLOSE_WAIT lsof.out|wc -l
306
[EMAIL PROTECTED] root]# grep LISTEN lsof.out|wc -l
324
I'm going to increase the file descriptor limit interim.
On Thu, 2004-02-26 at 09:42, Robert Schmidt wrote:
> Noticed the following errors in the clamd.log and wondered if anyone has
> insight into what they mean.
>
> running:
>
> ClamAV version 0.67, clamav-milter version 0.66n
>
> installed from CrashHat RPMS (I rebuilt them to remove the debugging
> noise).
>
> This isn't an issue with temporary file space unless the files are
> larger than 28 Gb.
>
> Let me know what other info anyone wants to get a better picture of what
> is going on.
>
> Wed Feb 25 21:07:54 2004 -> ERROR: ScanStream: accept() failed.
> Wed Feb 25 21:07:59 2004 -> ERROR: ScanStream: accept() failed.
> Wed Feb 25 21:08:02 2004 -> Session 4 stopped due to timeout.
> Wed Feb 25 21:08:22 2004 -> ERROR: ScanStream: Can't create temporary
> file.
> Wed Feb 25 21:08:22 2004 -> ERROR: ScanStream: Can't create temporary
> file.
> Wed Feb 25 21:08:22 2004 -> ERROR: ScanStream: Can't create temporary
> file.
> Wed Feb 25 21:08:23 2004 -> ERROR: ScanStream: Can't create temporary
> file.
> Wed Feb 25 21:08:29 2004 -> ERROR: ScanStream: Can't create temporary
> file.
> Wed Feb 25 21:10:04 2004 -> stream: Worm.SomeFool FOUND
> Wed Feb 25 21:10:05 2004 -> ERROR: ScanStream: Can't create temporary
> file.
> Wed Feb 25 21:10:05 2004 -> ERROR: ScanStream: Can't create temporary
> file.
> Wed Feb 25 21:10:06 2004 -> ERROR: ScanStream: Can't create temporary
> file.
> Wed Feb 25 21:10:26 2004 -> ERROR: ScanStream: Can't create temporary
> file.
> Wed Feb 25 21:10:58 2004 -> stream: Worm.MyDoom.E.UPX FOUND
> Wed Feb 25 21:11:02 2004 -> stream: Worm.MyDoom.E.UPX FOUND
> Wed Feb 25 21:11:44 2004 -> ERROR: ScanStream: Can't create temporary
> file.
> Wed Feb 25 21:11:51 2004 -> ERROR: ScanStream: Can't create temporary
> file.
> Wed Feb 25 21:11:52 2004 -> stream: Worm.SomeFool FOUND
> Wed Feb 25 21:11:53 2004 -> ERROR: ScanStream: Can't create temporary
> file.
> Wed Feb 25 21:11:54 2004 -> ERROR: ScanStream: Can't create temporary
> file.
> Wed Feb 25 21:11:54 2004 -> ERROR: ScanStream: Can't create temporary
> file.
> Wed Feb 25 21:11:57 2004 -> ERROR: ScanStream: Can't create temporary
> file.
> Wed Feb 25 21:11:57 2004 -> ERROR: ScanStream: Can't create temporary
> file.
> Wed Feb 25 21:11:57 2004 -> ERROR: ScanStream: Can't create temporary
> file.
> Wed Feb 25 21:11:59 2004 -> stream: Worm.MyDoom.E.UPX FOUND
>
> ...
>
> Wed Feb 25 21:18:49 2004 -> Session 5 stopped due to timeout.
> Wed Feb 25 21:18:59 2004 -> Segmentation fault :-( Bye..
--
Robert Schmidt -- UNIX Tech Support
[EMAIL PROTECTED]
MC1021 519-888-4567 x6453
-------------------------------------------------------
SF.Net is sponsored by: Speed Start Your Linux Apps Now.
Build and deploy apps & Web services for Linux with
a free DVD software kit from IBM. Click Now!
http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click
_______________________________________________
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users
