[Clamav-users] clamfi_eom: read nothing from clamd

Sun, 22 Aug 2004 23:30:20 -0700

Hello,
 
I have installed ClamAV version 0.75.1 to our mail server on FreeBSD 5.0+ sendmail and have a same problem listed before:
Any solution to this problem?? 
Thanks to answers.
 
 -------------------------------------------------messages from list----
  • From: Bill Pitz
  • Subject: [Clamav-users] clamd segfault
  • Date: Fri, 16 Apr 2004 11:23:46 -0700
I've had an occasional problem with clamd segfaulting. The basics of my system are as follows:

Red Hat Linux 9 / 2.4.25 kernel
Sendmail 8.12.11
clamav-0.68 + clamav-milter

Here are a few lines from my clamd logfile, leading up to the point of the segfault:
Thu Apr 15 13:16:09 2004 -> /var/spool/quarantine/msg.RUn5yx: Worm.Bagle.N FOUND
Thu Apr 15 13:16:10 2004 -> /var/spool/quarantine/msg.cCKcwi: Worm.Bagle.N FOUND
Thu Apr 15 13:16:17 2004 -> /var/spool/quarantine/msg.4wGSbv: Worm.SomeFool.Gen-1 FOUND
Thu Apr 15 13:16:28 2004 -> /var/spool/quarantine/msg.65IM3b: Worm.SomeFool.Gen-1 FOUND
Thu Apr 15 13:16:36 2004 -> /var/spool/quarantine/msg.XtmPzP: Worm.SomeFool.Gen-1 FOUND
Thu Apr 15 13:21:48 2004 -> /var/spool/quarantine/msg.OMoBrW: Worm.SomeFool.Gen-2 FOUND
Thu Apr 15 13:22:20 2004 -> /var/spool/quarantine/msg.KJ6QsC: Worm.SomeFool.P FOUND
Thu Apr 15 13:22:22 2004 -> /var/spool/quarantine/msg.pdBMFc: Worm.SomeFool.P FOUND
Thu Apr 15 13:22:58 2004 -> Segmentation fault :-( Bye..


At the same time, the following appears in /var/log/messages:
Apr 15 13:22:58 svn clamav-milter: clamfi_eom: read nothing from clamd



My /etc/clamav.conf:
--snip--
LogFile /var/log/clamd.log
LogFileMaxSize 20M
LogTime
PidFile /var/run/clamav/clamd.pid
DataDirectory /usr/share/clamav
LocalSocket /var/run/clamav/clamd.sock
StreamSaveToDisk
StreamMaxLength 2M
MaxThreads 20
ThreadTimeout 300
MaxDirectoryRecursion 15
User clamav
ScanMail
ScanArchive
ArchiveMaxFileSize 10M
ArchiveMaxRecursion 5
ArchiveMaxFiles 1000

#ClamukoScanOnLine
ClamukoScanOnOpen
ClamukoScanOnClose
ClamukoScanOnExec
ClamukoIncludePath /home
#ClamukoIncludePath /students
#ClamukoExcludePath /home/guru
ClamukoMaxFileSize 1M
ClamukoScanArchive
--snip--


clamav-mitler is being started with the following arguments:

--max-children=15 local:/var/run/clamav/clamav.sock -q -U /var/spool/quarantine -d




Any ideas as to what could be causing this or what I can do to prevent it? Unfortunately, this is all of the information I have been able to get. It's happened twice now.. the first time was a couple of months ago, with clamav-0.67.

Thanks,

Reply via email to