On 6/14/05, Damian Menscher <[EMAIL PROTECTED]> wrote: > How do you know that clamav spawned the 'ls' process?
Output from top that BigSister produces shows the process 'ls' belonging to the user 'clamav' > Any way to find out exactly what arguments 'ls' was called with? (Like, > a 'ps aux' or looking in /proc to see its cwd or somesuch.) unfortunately not, the box "hangs" when trying to start clamav and I have no chance to log into the system - the boot sequence doesn't complete and won't let me log in. > Given that it works after bootup, perhaps you need to move it later in > your boot sequence? I will give that a try as soon as possible, but as it's almost 3am here, I'll have to do that after I get some sleep. A further problem is, that I don't have physical access to the server. > My guess, assuming this is really related to clamav, is that it's trying > to find its database directory which is NFS mounted from another > .... The Server doesn't mount anything over NFS (planned, but we aren't there yet) - it's all on the local disk. I was suspecting inconsistencies with the user/group files first, but they seem to be okay. What I'm going to try, which wil hopefully shed some light on this, is to have ptrace invoked when starting clamav in the boot sequence, this might help in debugging things. Thanks and Regards Emanuel Nacht _______________________________________________ http://lurker.clamav.net/list/clamav-users.html
