On Thu, 2004-09-09 at 09:18, Erick Dantas Rotole wrote: > I am using freebsd, postfix, amavisd-new, spamassassin and clamav (all > latest version)in a server pentium iv with 512 RAM. > > Top shows that I have only 41M free and I think that 221M inact is > very high > Mem: 119M Active, 221M Inact, 93M Wired, 19M Cache, 60M Buf, 41M Free > > Is it normal?
Yes. Buy more RAM. I find I can only run six threads with 512M. I generally try to get 2G for a mail server and run 32 threads. > > > -----Mensagem original----- > De: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] > Enviada em: quinta-feira, 9 de setembro de 2004 00:29 > Para: [EMAIL PROTECTED] > Assunto: Clamav-users digest, Vol 1 #975 - 3 msgs > > > Send Clamav-users mailing list submissions to > [EMAIL PROTECTED] > > To subscribe or unsubscribe via the World Wide Web, visit > https://lists.sourceforge.net/lists/listinfo/clamav-users > or, via email, send a message with subject or body 'help' to > [EMAIL PROTECTED] > > You can reach the person managing the list at > [EMAIL PROTECTED] > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of Clamav-users digest..." > > > Today's Topics: > > 1. Re: Virus Distribution (=?ISO-8859-1?Q?Timo_Sch=F6ler?=) > 2. Re: Virus Distribution (Doug Hardie) > 3. ClamAV 0.75.1 building problems. (D Walsh) > > --__--__-- > > Message: 1 > Cc: Doug Hardie <[EMAIL PROTECTED]> > From: =?ISO-8859-1?Q?Timo_Sch=F6ler?= <[EMAIL PROTECTED]> > Subject: Re: [Clamav-users] Virus Distribution > Date: Wed, 8 Sep 2004 21:40:42 +0200 > To: [EMAIL PROTECTED] > Reply-To: [EMAIL PROTECTED] > > Thus spake Doug Hardie sometime Today... > > > > On Sep 8, 2004, at 12:16, Timo Sch=F6ler wrote: > > > >> Doug Hardie wrote: > >> > >>> I have a cron job that scans the clamd.log file every day and > >>> counts=20= > > >>> the specific virusus found. While the numbers tend to vary a > bit=20 > >>> from day to day the relative ratios between the various viruses=20 > >>> found tend to stay the same - except for Worm.Zafi.B. One day > it=20 > >>> will find 1100 of them and the next day 8. It is never > consistent. > >>> =20= > > >>> I am not seeing any significant number of viruses slipping > through. > >>> =20= > > >>> It seems to be some sort of distribution issue with that virus=20 > >>> itself. The others all seemed to come on strong at first and > >>> then=20= > > >>> die down to residual annoyances. But not this one. It keeps > >>> coming=20= > > >>> back in volume periodically. Any ideas what makes this one so=20 > >>> different from the rest? > >> > >> perhaps this may be interesting stuff for you: > >> > >> http://www.cs.berkeley.edu/~nweaver/sapphire/ > > > > Thanks but I would expect from that that the worm activity would > > tend=20= > > > to die down to a relatively constant nuisance level. However, its > > not=20= > > > doing that every couple days I get another flood of them. > > there may be several reasons: > > i) changing network behaviour (route flaps, etc.) > > ii) changing effectiveness of virus filters et al. > > iii) built-in automatisms in worm/virus itself > > NB: it is not always best to spread a virus/worm at the highest=20 > available speed (depends on number of infected hosts, bandwidth=20 > available to the hosts, etc.). > > i'm sure i missed another point i didn't think of now ;) > > --=20 > mit vorzueglichster Hochachtung/best regards, > > Timo Schoeler > //macfinity -- finest IT services | Triftstrasse 39 | 13353 Berlin > |=20 Germany Fon ++49 30 25 20 30 20 | Fax ++49 30 25 20 30 19 PGP > data http://www.macfinity.net/~tis/contact/PGPPKB_timo.schoeler.txt= > > > > --__--__-- > > Message: 2 > Cc: [EMAIL PROTECTED] > From: Doug Hardie <[EMAIL PROTECTED]> > Subject: Re: [Clamav-users] Virus Distribution > Date: Wed, 8 Sep 2004 13:52:52 -0700 > To: =?ISO-8859-1?Q?Timo_Sch=F6ler?= <[EMAIL PROTECTED]> > Reply-To: [EMAIL PROTECTED] > > Those certainly could be it, but it is unusual compared with the > other=20= > > viruses we see daily. I wonder if there is more to this one than > has=20 been foun yet. > > > On Sep 8, 2004, at 12:40, Timo Sch=F6ler wrote: > > > Thus spake Doug Hardie sometime Today... > >> > >> On Sep 8, 2004, at 12:16, Timo Sch=F6ler wrote: > >> > >>> Doug Hardie wrote: > >>> > >>>> I have a cron job that scans the clamd.log file every day and=20 > >>>> counts the specific virusus found. While the numbers tend to > >>>> vary=20= > > >>>> a bit from day to day the relative ratios between the various=20 > >>>> viruses found tend to stay the same - except for Worm.Zafi.B. > >>>> One=20= > > >>>> day it will find 1100 of them and the next day 8. It is never=20 > >>>> consistent. I am not seeing any significant number of viruses=20 > >>>> slipping through. It seems to be some sort of distribution > >>>> issue=20= > > >>>> with that virus itself. The others all seemed to come on strong > >>>> at=20= > > >>>> first and then die down to residual annoyances. But not this > one. > >>>> =20= > > >>>> It keeps coming back in volume periodically. Any ideas what > >>>> makes=20= > > >>>> this one so different from the rest? > >>> > >>> perhaps this may be interesting stuff for you: > >>> > >>> http://www.cs.berkeley.edu/~nweaver/sapphire/ > >> > >> Thanks but I would expect from that that the worm activity would > >> tend=20= > > >> to die down to a relatively constant nuisance level. However, > its=20 > >> not doing that every couple days I get another flood of them. > > > > there may be several reasons: > > > > i) changing network behaviour (route flaps, etc.) > > > > ii) changing effectiveness of virus filters et al. > > > > iii) built-in automatisms in worm/virus itself > > > > NB: it is not always best to spread a virus/worm at the highest=20 > > available speed (depends on number of infected hosts, bandwidth=20 > > available to the hosts, etc.). > > > > i'm sure i missed another point i didn't think of now ;) > > > > --=20 > > mit vorzueglichster Hochachtung/best regards, > > > > Timo Schoeler > > //macfinity -- finest IT services | Triftstrasse 39 | 13353 Berlin > > |=20= > > > Germany > > Fon ++49 30 25 20 30 20 | Fax ++49 30 25 20 30 19 > > PGP data = > http://www.macfinity.net/~tis/contact/PGPPKB_timo.schoeler.txt > > > > > > > > --__--__-- > > Message: 3 > To: ClamAV <[EMAIL PROTECTED]> > From: D Walsh <[EMAIL PROTECTED]> > Date: Wed, 8 Sep 2004 17:37:22 -0400 > Subject: [Clamav-users] ClamAV 0.75.1 building problems. > Reply-To: [EMAIL PROTECTED] > > In an attempt to upgrade my server and make use of this software, I've > done the following: > > cd /build > gnutar -xzvf clamav-0.75.1.tar.gz > mv ./clamav-0.75.1 ./clamav > cd clamav > > ./configure --prefix=/usr > sudo make > sudo make install > build.txt > > The program doesn't run, from what I can tell, the conf files are not > being installed and I was wondering if someone has a list of files > that > are supposed to be installed (what/where) with this build so I can > verify what else is missing from the install. > > Any help would be appreciated. > > here is the results of the 'make install' command > ______________________________________ > > Making install in libclamav > test -z "/usr/lib" || mkdir -p -- . "/usr/lib" > /bin/sh ../libtool --mode=install /usr/bin/install -c > 'libclamav.la' > '/usr/lib/libclamav.la' > /usr/bin/install -c .libs/libclamav.1.0.4.dylib > /usr/lib/libclamav.1.0.4.dylib > (cd /usr/lib && rm -f libclamav.1.dylib && ln -s libclamav.1.0.4.dylib > libclamav.1.dylib) > (cd /usr/lib && rm -f libclamav.dylib && ln -s libclamav.1.0.4.dylib > libclamav.dylib) > /usr/bin/install -c .libs/libclamav.lai /usr/lib/libclamav.la > /usr/bin/install -c .libs/libclamav.a /usr/lib/libclamav.a ranlib > /usr/lib/libclamav.a chmod 644 /usr/lib/libclamav.a > > ---------------------------------------------------------------------- > Libraries have been installed in: > /usr/lib > > If you ever happen to want to link against installed libraries in a > given directory, LIBDIR, you must either use libtool, and specify the > full pathname of the library, or use the `-LLIBDIR' flag during > linking and do at least one of the following: > > - add LIBDIR to the `DYLD_LIBRARY_PATH' environment variable > during execution > > See any operating system documentation about shared libraries for more > information, such as the ld(1) and ld.so(8) manual pages. > > ---------------------------------------------------------------------- > test -z "/usr/include" || mkdir -p -- . "/usr/include" > /usr/bin/install -c -m 644 'clamav.h' '/usr/include/clamav.h' Making > install in clamscan test -z "/usr/bin" || mkdir -p -- . "/usr/bin" > > /bin/sh ../libtool --mode=install /usr/bin/install -c 'clamscan' > '/usr/bin/clamscan' > /usr/bin/install -c .libs/clamscan /usr/bin/clamscan > make[2]: Nothing to be done for `install-data-am'. > Making install in clamd > test -z "/usr/sbin" || mkdir -p -- . "/usr/sbin" > /bin/sh ../libtool --mode=install /usr/bin/install -c 'clamd' > '/usr/sbin/clamd' > /usr/bin/install -c .libs/clamd /usr/sbin/clamd > make[2]: Nothing to be done for `install-data-am'. > Making install in clamdscan > test -z "/usr/bin" || mkdir -p -- . "/usr/bin" > /bin/sh ../libtool --mode=install /usr/bin/install -c 'clamdscan' > '/usr/bin/clamdscan' > /usr/bin/install -c .libs/clamdscan /usr/bin/clamdscan > make[2]: Nothing to be done for `install-data-am'. > Making install in freshclam > test -z "/usr/bin" || mkdir -p -- . "/usr/bin" > /bin/sh ../libtool --mode=install /usr/bin/install -c 'freshclam' > '/usr/bin/freshclam' > /usr/bin/install -c .libs/freshclam /usr/bin/freshclam > make[2]: Nothing to be done for `install-data-am'. > Making install in sigtool > test -z "/usr/bin" || mkdir -p -- . "/usr/bin" > /bin/sh ../libtool --mode=install /usr/bin/install -c 'sigtool' > '/usr/bin/sigtool' > /usr/bin/install -c .libs/sigtool /usr/bin/sigtool > make[2]: Nothing to be done for `install-data-am'. > Making install in database > /bin/sh ../mkinstalldirs /usr/share/clamav > Making install in docs > make[2]: Nothing to be done for `install-exec-am'. > test -z "/usr/share/man/man1" || mkdir -p -- . "/usr/share/man/man1" > /usr/bin/install -c -m 644 './man/clamscan.1' > '/usr/share/man/man1/clamscan.1' > /usr/bin/install -c -m 644 './man/freshclam.1' > '/usr/share/man/man1/freshclam.1' > /usr/bin/install -c -m 644 './man/sigtool.1' > '/usr/share/man/man1/sigtool.1' > /usr/bin/install -c -m 644 './man/clamdscan.1' > '/usr/share/man/man1/clamdscan.1' > test -z "/usr/share/man/man5" || mkdir -p -- . "/usr/share/man/man5" > /usr/bin/install -c -m 644 './man/clamav.conf.5' > '/usr/share/man/man5/clamav.conf.5' > /usr/bin/install -c -m 644 './man/freshclam.conf.5' > '/usr/share/man/man5/freshclam.conf.5' > test -z "/usr/share/man/man8" || mkdir -p -- . "/usr/share/man/man8" > /usr/bin/install -c -m 644 './man/clamd.8' > '/usr/share/man/man8/clamd.8' > /usr/bin/install -c -m 644 './man/clamav-milter.8' > '/usr/share/man/man8/clamav-milter.8' > Making install in etc > /bin/sh ../mkinstalldirs /usr/etc > Making install in clamav-milter > test -z "/usr/sbin" || mkdir -p -- . "/usr/sbin" > test -z "/usr/share/man/man8" || mkdir -p -- . "/usr/share/man/man8" > test -z "/usr/bin" || mkdir -p -- . "/usr/bin" > /usr/bin/install -c 'clamav-config' '/usr/bin/clamav-config' test -z > "/usr/lib/pkgconfig" || mkdir -p -- . "/usr/lib/pkgconfig" > > /usr/bin/install -c -m 644 'libclamav.pc' > '/usr/lib/pkgconfig/libclamav.pc' > > > > > --__--__-- > > _______________________________________________ > Clamav-users mailing list > [EMAIL PROTECTED] > https://lists.sourceforge.net/lists/listinfo/clamav-users > > > End of Clamav-users Digest -- Daniel J McDonald <[EMAIL PROTECTED]> Austin Energy ------------------------------------------------------- This SF.Net email is sponsored by: YOU BE THE JUDGE. Be one of 170 Project Admins to receive an Apple iPod Mini FREE for your judgement on who ports your project to Linux PPC the best. Sponsored by IBM. Deadline: Sept. 13. Go here: http://sf.net/ppc_contest.php _______________________________________________ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
