Re: [Clamav-users] [0.90.2 clamav-milter] Temporary quarantine file ... creation failed
On Friday 27 April 2007, Steve Holdoway wrote: Apr 26 16:51:28 mx1 clamav-milter[30761]: Temporary quarantine file /tmp/clamav-db5fe7f81e62a48f8c91bcf1d09e2d57/msg.1kSiUY creation failed [snip] Can you check the application/system logs for any problems with running out of file descriptors, too many open files, or the like?? Yes, I have not found problems. messages has only 2166 records 26 Apr. -- Regards, Sergey ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html
Re: [Clamav-users] [0.90.2 clamav-milter] Temporary quarantine file ... creation failed
What is your --max-children setting? Setting it lower might help. I'm thinking it might be trying to open too many temp files at once. Dave [EMAIL PROTECTED] 4/27/2007 7:49 AM On Friday 27 April 2007, Steve Holdoway wrote: Apr 26 16:51:28 mx1 clamav-milter[30761]: Temporary quarantine file /tmp/clamav-db5fe7f81e62a48f8c91bcf1d09e2d57/msg.1kSiUY creation failed [snip] Can you check the application/system logs for any problems with running out of file descriptors, too many open files, or the like?? Yes, I have not found problems. messages has only 2166 records 26 Apr. -- Regards, Sergey ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html
Re: [Clamav-users] [0.90.2 clamav-milter] Temporary quarantine file ... creation failed
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Fri, Apr 27, 2007 at 05:49:35PM +0500, Sergey wrote: Can you check the application/system logs for any problems with running out of file descriptors, too many open files, or the like?? Yes, I have not found problems. messages has only 2166 records 26 Apr. I realize it should contain everything in dmesg, but could you also check dmesg? - -- Regards... Todd when you shoot yourself in the foot, just because you are so neurally broken that the signal takes years to register in your brain, it does not mean that your foot does not have a hole in it. --Randy Bush Linux kernel 2.6.17-6mdv 4 users, load average: 0.08, 0.17, 0.21 -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.7 (GNU/Linux) iD8DBQFGMg2LY2VBGxIDMLwRAq34AJ98sR/z5cEPc3JUMwnHoScHyKqM+gCcDWAt OU8EkplG5ZQxy3wgpdLzmIA= =N7St -END PGP SIGNATURE- ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html
Re: [Clamav-users] [0.90.2 clamav-milter] Temporary quarantine file ... creation failed
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Thu, Apr 26, 2007 at 07:56:10AM -0500, Dave Dumbeck wrote: I have a problem with clamav-milter. It is working short time before going to error state. Let's check your virus database to see if it's in the range of acceptability. Does your number come close to this one? [EMAIL PROTECTED] ~]# sigtool --list-sigs | wc -l 112462 On Fri, Apr 27, 2007 at 12:00:59AM +0500, Sergey wrote: 84K /tmp/clamav-834f5ef6b9795ab1c6a4aab1b6e22957 4,0K/tmp/clamav-ab8db180f18e07399a3aa277f9bd0596 25M /tmp/clamav-partial 100K/tmp/clamav-0875ac240c38f48e46a9e4777ffa2a13 1,4M/tmp/clamav-6f2f2201c17d86795c857ee7579ebaf9 1,1M/tmp/clamav-e660d71b75810230d857d9acb84d0486 12K /tmp/clamav-47b78a7c4796898170578e4bfb4ffa88 768K/tmp/clamav-e4bfbe00950667df0e3f6edcd296d7c7 16K /tmp/clamav-db5fe7f81e62a48f8c91bcf1d09e2d57 4,0K/tmp/clamav-405dac474aebb9f2a240334d0428910b Kill sendmail, clamav-milter, (and clamd if you're running it, it's not clear here which mode you're running it in), blow away all those /tmp/clamav-* directories, then start clamd (if you're running it), start clamav-milter, and start sendmail. This means you start with a clean slate. Do I suspect there's anything wrong with what you have shown above? No. But we're starting from a clean slate, without any old left over stuff lying around (so we know which directory it's processing files in. 49M /tmp This is not bad. # find /tmp | wc -l 128 And this is not bad. Running out of ideas... What else runs on this machine? Do you have memory usage statistics? It may not be that clamav-milter is stressing the system to the limit of file descriptors but something else running on it is. - -- Regards... Todd I've visited conferences where the wireless LAN was deemed secure by the organisation because they had outlawed sniffers.--Neils Bakker Linux kernel 2.6.17-6mdv 4 users, load average: 0.02, 0.12, 0.18 -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.7 (GNU/Linux) iD8DBQFGMg9JY2VBGxIDMLwRAupQAJ9icPcfdS7l4ji0V5nlyaO1I+rpKgCePmvJ JSBkng+5KgRw1iuUzAE41fY= =HhOH -END PGP SIGNATURE- ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html
Re: [Clamav-users] [0.90.2 clamav-milter] Temporary quarantine file ... creation failed
On Friday 27 April 2007, Todd Lyons wrote: I have a problem with clamav-milter. It is working short time before going to error state. Let's check your virus database to see if it's in the range of acceptability. Does your number come close to this one? [EMAIL PROTECTED] ~]# sigtool --list-sigs | wc -l 112462 # sigtool --list-sigs | wc -l 112491 And it's not bug of clamd, clamd is working (but I apply a patch https://wwws.clamav.net/bugzilla/show_bug.cgi?id=434). On Fri, Apr 27, 2007 at 12:00:59AM +0500, Sergey wrote: 84K /tmp/clamav-834f5ef6b9795ab1c6a4aab1b6e22957 4,0K/tmp/clamav-ab8db180f18e07399a3aa277f9bd0596 Kill sendmail, clamav-milter, (and clamd if you're running it, it's not clear here which mode you're running it in), blow away all those /tmp/clamav-* directories, then start clamd (if you're running it), start clamav-milter, and start sendmail. I attempted it before first message. :-( Running out of ideas... What else runs on this machine? It's a dual Xeon Intel server with 3Gb memory. It's only SMTP server. Main processes: sendmail, clamd. Last night I changed clamav-milter to mailfromd, but to latest svn, not to release. It have some problem too but not with communication to clamd. Possible it will be solution for me. -- Regards, Sergey ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html
Re: [Clamav-users] [0.90.2 clamav-milter] Temporary quarantine file ... creation failed
Does the clamav user account have write access to /tmp? Dave [EMAIL PROTECTED] 4/26/2007 7:49 AM Hello. I have a problem with clamav-milter. It is working short time before going to error state. /tmp in a /, /dev/sda2 4,0G 294M 3,5G 8% / Has somebody any ideas ? Apr 26 16:50:27 mx1 sendmail[27486]: l3QBnJ1T027486: Milter add: header: X-Virus-Scanned: ClamAV version 0.90.2, clamav-milter version 0.90.2 on mx1.kraft-s.net Apr 26 16:50:27 mx1 sendmail[28728]: l3QBoD32028728: Milter add: header: X-Virus-Scanned: ClamAV version 0.90.2, clamav-milter version 0.90.2 on mx1.kraft-s.net Apr 26 16:50:28 mx1 sendmail[28726]: l3QBoFhq028726: Milter add: header: X-Virus-Scanned: ClamAV version 0.90.2, clamav-milter version 0.90.2 on mx1.kraft-s.net Apr 26 16:50:29 mx1 sendmail[28764]: l3QBoF3V028764: Milter add: header: X-Virus-Scanned: ClamAV version 0.90.2, clamav-milter version 0.90.2 on mx1.kraft-s.net Apr 26 16:50:29 mx1 sendmail[28617]: l3QBo9iP028617: Milter add: header: X-Virus-Scanned: ClamAV version 0.90.2, clamav-milter version 0.90.2 on mx1.kraft-s.net Apr 26 16:50:30 mx1 clamav-milter[28799]: Temporary quarantine file /tmp/clamav-db5fe7f81e62a48f8c91bcf1d09e2d57/msg.tSH0j7 creation failed first problem Apr 26 16:50:30 mx1 sendmail[19010]: l3QBiojI019010: Milter add: header: X-Virus-Scanned: ClamAV version 0.90.2, clamav-milter version 0.90.2 on mx1.kraft-s.net Apr 26 16:50:31 mx1 sendmail[28908]: l3QBoKnR028908: Milter add: header: X-Virus-Scanned: ClamAV version 0.90.2, clamav-milter version 0.90.2 on mx1.kraft-s.net Apr 26 16:50:31 mx1 clamav-milter[28891]: Temporary quarantine file /tmp/clamav-db5fe7f81e62a48f8c91bcf1d09e2d57/msg.Mj8QJR creation failed Apr 26 16:50:31 mx1 sendmail[28933]: l3QBoLj5028933: Milter add: header: X-Virus-Scanned: ClamAV version 0.90.2, clamav-milter version 0.90.2 on mx1.kraft-s.net Apr 26 16:50:31 mx1 sendmail[28634]: l3QBoBtL028634: Milter add: header: X-Virus-Scanned: ClamAV version 0.90.2, clamav-milter version 0.90.2 on mx1.kraft-s.net Apr 26 16:50:32 mx1 clamav-milter[28598]: Temporary quarantine file /tmp/clamav-db5fe7f81e62a48f8c91bcf1d09e2d57/msg.S5S8vl creation failed Apr 26 16:50:33 mx1 clamav-milter[28941]: Temporary quarantine file /tmp/clamav-db5fe7f81e62a48f8c91bcf1d09e2d57/msg.U2FSr1 creation failed Apr 26 16:50:33 mx1 clamav-milter[29082]: Temporary quarantine file /tmp/clamav-db5fe7f81e62a48f8c91bcf1d09e2d57/msg.vAnTAJ creation failed Apr 26 16:50:34 mx1 clamav-milter[29238]: Temporary quarantine file /tmp/clamav-db5fe7f81e62a48f8c91bcf1d09e2d57/msg.LcChkT creation failed skip Apr 26 16:51:22 mx1 clamav-milter[30280]: Temporary quarantine file /tmp/clamav-db5fe7f81e62a48f8c91bcf1d09e2d57/msg.80JZZY creation failed Apr 26 16:51:23 mx1 clamav-milter[30588]: Temporary quarantine file /tmp/clamav-db5fe7f81e62a48f8c91bcf1d09e2d57/msg.r32Kk7 creation failed Apr 26 16:51:23 mx1 clamav-milter[30579]: Temporary quarantine file /tmp/clamav-db5fe7f81e62a48f8c91bcf1d09e2d57/msg.f90f1G creation failed Apr 26 16:51:23 mx1 clamav-milter[28543]: Temporary quarantine file /tmp/clamav-db5fe7f81e62a48f8c91bcf1d09e2d57/msg.d68Rtg creation failed Apr 26 16:51:24 mx1 clamav-milter[30299]: Temporary quarantine file /tmp/clamav-db5fe7f81e62a48f8c91bcf1d09e2d57/msg.k6bM9L creation failed Apr 26 16:51:24 mx1 clamav-milter[30588]: Temporary quarantine file /tmp/clamav-db5fe7f81e62a48f8c91bcf1d09e2d57/msg.mpXhcW creation failed Apr 26 16:51:24 mx1 clamav-milter[30588]: Temporary quarantine file /tmp/clamav-db5fe7f81e62a48f8c91bcf1d09e2d57/msg.c8aKx8 creation failed Apr 26 16:51:26 mx1 clamav-milter[30310]: Temporary quarantine file /tmp/clamav-db5fe7f81e62a48f8c91bcf1d09e2d57/msg.wwE2Uw creation failed Apr 26 16:51:26 mx1 clamav-milter[30850]: Temporary quarantine file /tmp/clamav-db5fe7f81e62a48f8c91bcf1d09e2d57/msg.gQlYfB creation failed Apr 26 16:51:28 mx1 clamav-milter[30702]: Temporary quarantine file /tmp/clamav-db5fe7f81e62a48f8c91bcf1d09e2d57/msg.aOzgqC creation failed Apr 26 16:51:28 mx1 clamav-milter[30761]: Temporary quarantine file /tmp/clamav-db5fe7f81e62a48f8c91bcf1d09e2d57/msg.1kSiUY creation failed -- Regards, Sergey ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html
Re: [Clamav-users] [0.90.2 clamav-milter] Temporary quarantine file ... creation failed
Dave Dumbeck wrote: Does the clamav user account have write access to /tmp? of course ! Apr 26 16:50:27 mx1 sendmail[27486]: l3QBnJ1T027486: Milter add: header: X-Virus-Scanned: ClamAV version 0.90.2, It was working before 16:50:27, but is not working after 16:51:22 in this example. Apr 26 16:51:22 mx1 clamav-milter[30280]: Temporary quarantine file /tmp/clamav-db5fe7f81e62a48f8c91bcf1d09e2d57/msg.80JZZY creation failed clamav-milter is working some time after restart. -- Regards, Sergey ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html
Re: [Clamav-users] [0.90.2 clamav-milter] Temporary quarantine file ... creation failed
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Thu, Apr 26, 2007 at 06:28:28PM +0500, Sergey wrote: Apr 26 16:50:27 mx1 sendmail[27486]: l3QBnJ1T027486: Milter add: header: X-Virus-Scanned: ClamAV version 0.90.2, It was working before 16:50:27, but is not working after 16:51:22 in this example. Show us the results of df -h and df -i. Chances are that one of them has hit 95% (only root can write to the final 5% of a mount). - -- Regards... Todd OS X: We've been fighting the It's a mac syndrome with upper management for years now. Lately we've taken to just referring to new mac installations as Unix installations when presenting proposals and updates. For some reason, they have no problem with that. -- /. Linux kernel 2.6.17-6mdv 4 users, load average: 0.01, 0.04, 0.09 -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.7 (GNU/Linux) iD8DBQFGMLhiY2VBGxIDMLwRAnldAJ9vUx5mtjym1ND2C5H8vXUgWwYffACghHMj LxkrdiXWd09b5eGOsaTT8C4= =FLcU -END PGP SIGNATURE- ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html
Re: [Clamav-users] [0.90.2 clamav-milter] Temporary quarantine file ... creation failed
On Thursday 26 April 2007, Todd Lyons wrote: Apr 26 16:50:27 mx1 sendmail[27486]: l3QBnJ1T027486: Milter add: header: X-Virus-Scanned: ClamAV version 0.90.2, It was working before 16:50:27, but is not working after 16:51:22 in this example. Show us the results of df -h and df -i. Chances are that one of them has hit 95% (only root can write to the final 5% of a mount). # df -h (df for / was in the first mail) FilesystemSize Used Avail Use% Mounted on /dev/sda2 4,0G 293M 3,5G 8% / # df -i FilesystemInodes IUsed IFree IUse% Mounted on /dev/sda2 512K 27K486K6% / 0.88.7 worked well on this system. -- Regards, Sergey ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html
Re: [Clamav-users] [0.90.2 clamav-milter] Temporary quarantine file ... creation failed
Out of file descriptors, perhaps? [EMAIL PROTECTED] 4/26/2007 10:15 AM On Thursday 26 April 2007, Todd Lyons wrote: Apr 26 16:50:27 mx1 sendmail[27486]: l3QBnJ1T027486: Milter add: header: X-Virus-Scanned: ClamAV version 0.90.2, It was working before 16:50:27, but is not working after 16:51:22 in this example. Show us the results of df -h and df -i. Chances are that one of them has hit 95% (only root can write to the final 5% of a mount). # df -h (df for / was in the first mail) FilesystemSize Used Avail Use% Mounted on /dev/sda2 4,0G 293M 3,5G 8% / # df -i FilesystemInodes IUsed IFree IUse% Mounted on /dev/sda2 512K 27K486K6% / 0.88.7 worked well on this system. -- Regards, Sergey ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html
Re: [Clamav-users] [0.90.2 clamav-milter] Temporary quarantine file ... creation failed
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Thu, Apr 26, 2007 at 08:15:00PM +0500, Sergey wrote: On Thursday 26 April 2007, Todd Lyons wrote: Apr 26 16:51:22 mx1 clamav-milter[30280]: Temporary quarantine file /tmp/clamav-db5fe7f81e62a48f8c91bcf1d09e2d57/msg.80JZZY creation failed Show us the results of df -h and df -i. Chances are that one of them has hit 95% (only root can write to the final 5% of a mount). # df -h (df for / was in the first mail) FilesystemSize Used Avail Use% Mounted on /dev/sda2 4,0G 293M 3,5G 8% / # df -i FilesystemInodes IUsed IFree IUse% Mounted on /dev/sda2 512K 27K486K6% / So /tmp is not a seperate file system on your installation then. If it was, it would have shown up in here. Since the issue is being unable to create files in /tmp, let's dig into the contents of /tmp: du -h --max-depth=1 /tmp find /tmp | wc -l Look for there to be a lot of files either in the base /tmp directory or in the individual /tmp/clamav-* directory shown above. ClamAV creates one directory at startup and then all messages it scans are temp saved in that directory while it scans them. If for some reason it's not deleting them and they're hanging around, well, that could explain why it can't create past a certain number (though I thought the result would be slow, not a failure to create). If some other application is not removing items from the /tmp directory, you could see the same result. 0.88.7 worked well on this system. Good to know, provides a basis for comparison. - -- Regards... Todd Chris: grep 500 sendmail.mc undefine(`FAIL_MAIL_OVER_500_MILES')dnl Chris: just in case ... Linux kernel 2.6.17-6mdv 4 users, load average: 0.01, 0.01, 0.00 -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.7 (GNU/Linux) iD8DBQFGMMmZY2VBGxIDMLwRAtoaAJ9UbC4zzznktvI9TjL0H5mnODV3lwCeJXi5 +GHzF+0Vv+G9yY5oFAnxXBg= =qgOi -END PGP SIGNATURE- ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html
Re: [Clamav-users] [0.90.2 clamav-milter] Temporary quarantine file ... creation failed
On Thursday 26 April 2007, Todd Lyons wrote: So /tmp is not a seperate file system on your installation then. I can do it a seperate... If it was, it would have shown up in here. Since the issue is being unable to create files in /tmp, let's dig into the contents of /tmp: du -h --max-depth=1 /tmp 4,0K/tmp/downloads 64K /tmp/.private 4,0K/tmp/.ICE-unix 4,0K/tmp/.X11-unix 4,0K/tmp/.esd 4,0K/tmp/.font-unix 4,0K/tmp/.winbindd 84K /tmp/clamav-834f5ef6b9795ab1c6a4aab1b6e22957 4,0K/tmp/clamav-ab8db180f18e07399a3aa277f9bd0596 25M /tmp/clamav-partial 100K/tmp/clamav-0875ac240c38f48e46a9e4777ffa2a13 1,4M/tmp/clamav-6f2f2201c17d86795c857ee7579ebaf9 1,1M/tmp/clamav-e660d71b75810230d857d9acb84d0486 12K /tmp/clamav-47b78a7c4796898170578e4bfb4ffa88 768K/tmp/clamav-e4bfbe00950667df0e3f6edcd296d7c7 16K /tmp/clamav-db5fe7f81e62a48f8c91bcf1d09e2d57 4,0K/tmp/clamav-405dac474aebb9f2a240334d0428910b 49M /tmp find /tmp | wc -l # find /tmp | wc -l 128 -- Regards, Sergey ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html
Re: [Clamav-users] [0.90.2 clamav-milter] Temporary quarantine file ... creation failed
On Thu, 26 Apr 2007 17:49:02 +0500 Sergey [EMAIL PROTECTED] wrote: Hello. Apr 26 16:51:28 mx1 clamav-milter[30761]: Temporary quarantine file /tmp/clamav-db5fe7f81e62a48f8c91bcf1d09e2d57/msg.1kSiUY creation failed [snip] Can you check the application/system logs for any problems with running out of file descriptors, too many open files, or the like?? ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html
