On 5 Jul 2006 at 13:15, Stephen Gran wrote:

> On Wed, Jul 05, 2006 at 12:30:26PM +0100, Beginner said:
> > I am not getting any joy with the -f or -ff switch. When I try
> > 
> > >strace -o clam-debug.txt -ff clamd
> > 
> > It only creates one process:
> > 
> > clamav    4648  0.0  1.6 26904 20984 ?       Ts   12:19   0:00 clamd
> 
> This process is suspended - did you <ctl>-z it?  You'll need to just
> leave it running until you get some defunct zombies.

No I simply issue the command and wait. Without the -f switch I get 3 process 
within 2 minutes 
and a defunct process within 3 minutes. Once I try and use the -ff option the 
process gets 
suspended, I only get one clamd parent.

>strace -ff -o clamv.txt /usr/sbin/clamd
>ps aux|grep clam
clamav   18712  0.0  1.6 26912 20984 ?       Ts   14:41   0:00 /usr/sbin/clamd

>strace -o clamv.txt /usr/sbin/clamd
>ps aux|grep clam
clamav   18453  0.0  1.6 28960 21176 ?       Ss   14:39   0:00 /usr/sbin/clamd
clamav   18480  0.0  1.6 28960 21176 ?       S    14:39   0:00 /usr/sbin/clamd
clamav   18481  1.3  0.0     0    0 ?        Z    14:39   0:00 [clamd] <defunct>

I think this might be part of the same problem.

I have moved in /tmp in case there were permissions problem with my home dir 
but that hasn't 
helped.
 
> This works fine here:
> sudo strace -o clamv.txt -ff /usr/sbin/clamd

So I tried this
>/etc/init.d/clamav-daemon restart
>ps -ef|grep clam
clamav   19989     1  0 14:53 ?        00:00:00 /usr/sbin/clamd
>strace -ff -o clamd1.txt -p 19989
Process 19989 attached - interrupt to quit
Process 20081 attached
Process 20082 attached
Process 20082 detached
Process 20320 attached
Process 20320 detached
Process 20638 attached

in the meantime 
>ps -ef |grep clam
root     20024 19414  0 14:53 pts/0    00:00:00 strace -ff -o clamd1.txt -p 
19989
clamav   19989     1  0 14:53 ?        00:00:00 /usr/sbin/clamd
clamav   20081 19989  0 14:54 ?        00:00:00 /usr/sbin/clamd
clamav   20082 20081  0 14:54 ?        00:00:01 [clamd] <defunct>
clamav   20320 20081  0 14:56 ?        00:00:00 [clamd] <defunct>
clamav   20638 20081  0 14:59 ?        00:00:00 /usr/sbin/clamd

and presto!

 root 593920 2006-07-05 15:01 clamfile.tar
 root  19591 2006-07-05 15:00 clamd1.txt.20081
 root   7142 2006-07-05 15:00 clamd1.txt
 root 109917 2006-07-05 15:00 clamd1.txt.20638
 root 228202 2006-07-05 14:59 clamd1.txt.20320
 root 217694 2006-07-05 14:56 clamd1.txt.20082

I'll mail you files off-list.
Thanx.
Dp.




_______________________________________________
http://lurker.clamav.net/list/clamav-users.html

Reply via email to