jean-paul natola wrote:
Hi everyone,
Hello.
I'm having a bit of a problem with clamav on my server-
I'm getting about 3 to 4 of these per hour- and I dont know why its
happening
"malware acl condition: clamd: unable to read from socket (Operation
timed out)"
and yes mail is still coming in- and clamd is running
I'm running;
Freebsd 5.4 clamav 88.7 SA 3.1.7
In the paniclog /var/log/exim/paniclog is where I 'm seeing these entries
I did check the 'messages' log and there are no entries-
It seems that clamav is timing out when it is attempting to scan large
messages
yesterday I saw clams cpu and mem start to skyrocket, at that moment i
looked at what message was being scanned and it was an 18meg file which
subsequently caused another timeout error
ok i just reset the log and this is the entry I saw last -
Set stack size to 1048576
/var/spool/exim/scan/1GvHHI-000AMr-JU/1GvHHI-000AMr-JU.eml:
HTML.Phishing.Bank-627 FOUND
Reading databases from /var/db/clamav
Database correctly reloaded (82936 viruses)
Client disconnected
SelfCheck: Database status OK.
/var/spool/exim/scan/1GvHgK-000AQG-Eo/1GvHgK-000AQG-Eo.eml:
HTML.Phishing.Auction-144 FOUND
_________________________________________________________________
Get the latest Windows Live Messenger 8.1 Beta version. Join now.
http://ideas.live.com
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html
