Not ALL messages are  getting through as the error from the previous
message
inicated-   but  most of them get through-

its just randomly timing out on some messages -



I made an observation-

I noticed when i ran top that the "time" field for clam was high- 250:00 before I restarted clam-

I then observed as the time started increasing and the wcpu

9364 clamav    20    0 25744K 24544K kserel   1:52 61.18% 61.18% clamd

at that moment I jumped into /var/spool/exim/scan/ and found this:

drwxr-x---  2 mailnull  mail  1024 Dec 14 10:10 1GusBk-0002SX-Ok

after cd into it I saw a HUGE message-

rw-r-----  1 mailnull  mail  7233975 Dec 14 10:10 1GusBk-0002SX-Ok-00000
-rw-r-----  1 mailnull  mail      270 Dec 14 10:10 1GusBk-0002SX-Ok-00001
-rw-r-----  1 mailnull  mail  7233422 Dec 14 10:10 1GusBk-0002SX-Ok-00002
-rw-r-----  1 mailnull  mail      135 Dec 14 10:10 1GusBk-0002SX-Ok-00003
-rw-r-----  1 mailnull  mail  1780193 Dec 14 10:10 1GusBk-0002SX-Ok-00004
-rw-r-----  1 mailnull  mail    53466 Dec 14 10:10 1GusBk-0002SX-Ok-00005
-rw-r-----  1 mailnull  mail  1264032 Dec 14 10:10 1GusBk-0002SX-Ok-00006
-rw-r-----  1 mailnull  mail      180 Dec 14 10:10 1GusBk-0002SX-Ok-00007
-rw-r-----  1 mailnull  mail  1640873 Dec 14 10:10 1GusBk-0002SX-Ok-00008
-rw-r-----  1 mailnull  mail    49692 Dec 14 10:10 1GusBk-0002SX-Ok-00009
-rw-r-----  1 mailnull  mail  1164678 Dec 14 10:10 1GusBk-0002SX-Ok-00010
-rw-r-----  1 mailnull  mail      225 Dec 14 10:10 1GusBk-0002SX-Ok-00011
-rw-r-----  1 mailnull  mail  1994156 Dec 14 10:10 1GusBk-0002SX-Ok-00012
-rw-r-----  1 mailnull  mail    53972 Dec 14 10:10 1GusBk-0002SX-Ok-00013
-rw-r-----  1 mailnull  mail  1421914 Dec 14 10:10 1GusBk-0002SX-Ok-00014
-rw-r-----  1 mailnull  mail      270 Dec 14 10:10 1GusBk-0002SX-Ok-00015
-rw-r-----  1 mailnull  mail  1812449 Dec 14 10:10 1GusBk-0002SX-Ok-00016
-rw-r-----  1 mailnull  mail    53133 Dec 14 10:10 1GusBk-0002SX-Ok-00017
-rw-r-----  1 mailnull  mail  1288245 Dec 14 10:10 1GusBk-0002SX-Ok-00018
-rw-r-----  1 mailnull  mail     3645 Dec 14 10:10 1GusBk-0002SX-Ok-00019
-rw-r-----  1 mailnull  mail  7235351 Dec 14 10:10 1GusBk-0002SX-Ok.eml

and sure enough the next entry in my paniclog was

2006-12-14 10:12:53 1GusBk-0002SX-Ok malware acl condition: clamd: unable to read from socket (Operation timed out)

_________________________________________________________________
View Athlete’s Collections with Live Search http://sportmaps.live.com/index.html?source=hmemailtaglinenov06&FORM=MGAC01


-- 
## List details at http://www.exim.org/mailman/listinfo/exim-users 
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://www.exim.org/eximwiki/

Reply via email to