Re: [Clamav-users] Problem with clamd hanging
Tomasz Kojm [EMAIL PROTECTED] Date: Tue, 25 Jan 2005 18:09:59 +0100 Subject: Re: [Clamav-users] Problem with clamd hanging On Tue, 25 Jan 2005 17:48:08 +0100 [EMAIL PROTECTED] wrote: Trog [EMAIL PROTECTED] Thats normal behaviour. A gdb backtrace of each thread when it is hanging is the most helpful thing at the moment. Ok, so I did not use gdb as gdb core dump (maybe because I compiled clamav with sun cc). I used dbx and here is the backtrace : I can send you the email that was scanned. =[1] __zzip_find_disk_trailer(fd = 12, filesize = 31981, trailer = 0xfeb7b29e, io = 0xff30c2b0), line 289 in zzip-zip.c This is a known problem when using Sun's cc. Recompile with gcc. After 24hours with 0.81rc1 compiled with gcc I have not seen any hang-up. That's really better. f.g. ___ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
Re: [Clamav-users] Problem with clamd hanging
On Thu, 27 Jan 2005 09:51:48 +0100 in [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: After 24hours with 0.81rc1 compiled with gcc I have not seen any hang-up. And 0.81 is now released officially. -- Brian Morrison bdm at fenrir dot org dot uk GnuPG key ID DE32E5C5 - http://wwwkeys.uk.pgp.net/pgpnet/wwwkeys.html ___ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
Re: [Clamav-users] Problem with clamd hanging
Tomasz Kojm [EMAIL PROTECTED] Date: Tue, 25 Jan 2005 18:09:59 +0100 Subject: Re: [Clamav-users] Problem with clamd hanging --===1361425311== Content-Type: multipart/signed; protocol=application/pgp-signature; micalg=pgp-sha1; boundary=Signature=_Tue__25_Jan_2005_18_09_59_+0100__WOiO7nH5vqSnS4f --Signature=_Tue__25_Jan_2005_18_09_59_+0100__WOiO7nH5vqSnS4f Content-Type: text/plain; charset=US-ASCII Content-Disposition: inline Content-Transfer-Encoding: 7bit On Tue, 25 Jan 2005 17:48:08 +0100 [EMAIL PROTECTED] wrote: Trog [EMAIL PROTECTED] Thats normal behaviour. A gdb backtrace of each thread when it is hanging is the most helpful thing at the moment. Ok, so I did not use gdb as gdb core dump (maybe because I compiled clamav with sun cc). I used dbx and here is the backtrace : I can send you the email that was scanned. =[1] __zzip_find_disk_trailer(fd = 12, filesize = 31981, trailer = 0xfeb7b29e, io = 0xff30c2b0), line 289 in zzip-zip.c This is a known problem when using Sun's cc. Recompile with gcc. I've done it... It works now for this file. THansk. Maybe it could be mentionned somewhere (or maybe I have not seen it). f.g. ___ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
Re: [Clamav-users] Problem with clamd hanging
- Original Message - From: Tomasz Kojm [EMAIL PROTECTED] To: ClamAV users ML clamav-users@lists.clamav.net Sent: Monday, January 24, 2005 4:31 PM Subject: Re: [Clamav-users] Problem with clamd hanging It's rather a SESSION related bug. See my yesterday's post on a temporary workaround for this problem. This fix was related to clamav-milter right? We don't use it, don't have the milter package installed at all (built own rpm from source), so should we install the milter package(with the fix) to fix the clamd bug? In your case it's rather a zlib problem. Make sure you have installed the new version properly - by default its Makefile only installs the static library. Tried on 1 box that had the problem. Compiled zlib 1.2.2-1 from source, with shared libraries. This morning it happened again Is there anything else we can try or check to try solve this? thanks, shaun bugler PS: you say its a zlib problem, what specifically is this problem? ___ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users ___ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
Re: [Clamav-users] Problem with clamd hanging
Shaun Bugler [EMAIL PROTECTED] Date: Tue, 25 Jan 2005 10:26:07 +0200 Subject: Re: [Clamav-users] Problem with clamd hanging It's rather a SESSION related bug. See my yesterday's post on a temporary workaround for this problem. This fix was related to clamav-milter right? We don't use it, don't have the milter package installed at all (built own rpm from source), so should we install the milter package(with the fix) to fix the clamd bug? In your case it's rather a zlib problem. Make sure you have installed the new version properly - by default its Makefile only installs the static library. Tried on 1 box that had the problem. Compiled zlib 1.2.2-1 from source, with shared libraries. This morning it happened again Is there anything else we can try or check to try solve this? thanks, shaun bugler PS: you say its a zlib problem, what specifically is this problem? I have tried with 0.81rc1 + zlib 1.2.2 and still hang several times this night. f.g. ___ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
Re: [Clamav-users] Problem with clamd hanging
On Tue, 2005-01-25 at 10:26 +0200, Shaun Bugler wrote: Tried on 1 box that had the problem. Compiled zlib 1.2.2-1 from source, with shared libraries. This morning it happened again Is there anything else we can try or check to try solve this? thanks, shaun bugler attach gdb to the running clamd and do a backtrace *in each thread* when it crashes or stops responding PS: you say its a zlib problem, what specifically is this problem? It seg faults due to not handling an error correctly. -trog signature.asc Description: This is a digitally signed message part ___ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
Re: [Clamav-users] Problem with clamd hanging
On Tue, 25 Jan 2005 10:00:13 +0100 [EMAIL PROTECTED] wrote: I have tried with 0.81rc1 + zlib 1.2.2 and still hang several times this night. We can't help you unless you provide some useful information (backtraces, etc.). -- oo. Tomasz Kojm [EMAIL PROTECTED] (\/)\. http://www.ClamAV.net/gpg/tkojm.gpg \..._ 0DCA5A08407D5288279DB43454822DC8985A444B //\ /\ Tue Jan 25 11:44:27 CET 2005 pgpMhz3bvu4ps.pgp Description: PGP signature ___ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
Re: [Clamav-users] Problem with clamd hanging
Content-Transfer-Encoding: plain
- Original Message -
From: Trog [EMAIL PROTECTED]
To: ClamAV users ML clamav-users@lists.clamav.net
Sent: Tuesday, January 25, 2005 11:02 AM
Subject: Re: [Clamav-users] Problem with clamd hanging
Tried on 1 box that had the problem.
Compiled zlib 1.2.2-1 from source, with shared libraries.
This morning it happened again Is there anything else we can try or
check to try solve this?
thanks,
shaun bugler
attach gdb to the running clamd and do a backtrace *in each thread* when
it crashes or stops responding
PS: you say its a zlib problem, what specifically is this problem?
It seg faults due to not handling an error correctly.
-trog
While I was waiting to get a new version of gdb, I saw the problem appearing
again.
I saved the emails and retried scanning, it stalled again...
Did a strace:
shmat(4, 0x3, 0x3) = -1 ENOSYS (Function not
implemented)
fcntl(4, F_GETFL) = 0x2 (flags O_RDWR)
fstat(4, {st_mode=S_IFLNK|S_ISVTX|0254, st_size=0, ...}) = 0
mmap(0, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) =
0x40018000
_llseek(0x4, 0, 0, 0xbfffe680, 0x1) = -1 ESPIPE (Illegal seek)
read(4,
and thats there it stopped. I did a clamscan and got:
[EMAIL PROTECTED] dd]# clamscan 1106645880.4304-0.mail1a.your-server.co.za
LibClamAV Warning: Unknown encoding type plain - report to [EMAIL PROTECTED]
1106645880.4304-0.mail1a.your-server.co.za: OK
I investigatd further and found the following line was causing the problem:
Content-Transfer-Encoding: plain
Once removed the emails went through fine. Should I report this to [EMAIL
PROTECTED]
or is this a know
problem?
thanks,
shaun bugler
___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
Re: [Clamav-users] Problem with clamd hanging
On Tuesday 25 Jan 2005 10:50, Shaun Bugler wrote: [EMAIL PROTECTED] dd]# clamscan 1106645880.4304-0.mail1a.your-server.co.za LibClamAV Warning: Unknown encoding type plain - report to [EMAIL PROTECTED] 1106645880.4304-0.mail1a.your-server.co.za: OK I investigatd further and found the following line was causing the problem: Content-Transfer-Encoding: plain Once removed the emails went through fine. Should I report this to [EMAIL PROTECTED] or is this a know problem? Does 0.81rc1 fix the problem? thanks, shaun bugler -- Nigel Horne. Arranger, Composer, Typesetter. NJH Music, Barnsley, UK. ICQ#20252325 [EMAIL PROTECTED] http://www.bandsman.co.uk ___ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
Re: [Clamav-users] Problem with clamd hanging
On Tue, 2005-01-25 at 12:50 +0200, Shaun Bugler wrote: and thats there it stopped. I did a clamscan and got: [EMAIL PROTECTED] dd]# clamscan 1106645880.4304-0.mail1a.your-server.co.za LibClamAV Warning: Unknown encoding type plain - report to [EMAIL PROTECTED] 1106645880.4304-0.mail1a.your-server.co.za: OK I investigatd further and found the following line was causing the problem: Content-Transfer-Encoding: plain Once removed the emails went through fine. Should I report this to [EMAIL PROTECTED] or is this a know problem? Please send the whole email, in a password protected zip file to the above address, and to me directly. Thanks, -trog signature.asc Description: This is a digitally signed message part ___ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
Re: [Clamav-users] Problem with clamd hanging
On Tue, 2005-01-25 at 12:22 +0100, [EMAIL PROTECTED] wrote: Btw I did a truss a few days ago on the hanging process and it was stopped in an accept syscall. Thats normal behaviour. A gdb backtrace of each thread when it is hanging is the most helpful thing at the moment. -trog signature.asc Description: This is a digitally signed message part ___ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
Re: [Clamav-users] Problem with clamd hanging
On Tue, 2005-01-25 at 12:50 +0200, Shaun Bugler wrote:
I saved the emails and retried scanning, it stalled again...
Did a strace:
shmat(4, 0x3, 0x3) = -1 ENOSYS (Function not
implemented)
fcntl(4, F_GETFL) = 0x2 (flags O_RDWR)
fstat(4, {st_mode=S_IFLNK|S_ISVTX|0254, st_size=0, ...}) = 0
mmap(0, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) =
0x40018000
_llseek(0x4, 0, 0, 0xbfffe680, 0x1) = -1 ESPIPE (Illegal seek)
read(4,
and thats there it stopped. I did a clamscan and got:
What is this a trace of? Could you send the full trace? This seek() on a
pipe is rather odd. I can't think how clam would do that, ATM.
Could you give a full inventory of your software and configuration
please.
MTA; software used to pass emails to clam; any patches you have applied
(to all, but primarily to clam). Versions of each.
Thanks,
-trog
signature.asc
Description: This is a digitally signed message part
___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
Re: [Clamav-users] Problem with clamd hanging
- Original Message - From: Trog [EMAIL PROTECTED] To: ClamAV users ML clamav-users@lists.clamav.net Sent: Tuesday, January 25, 2005 2:20 PM Subject: Re: [Clamav-users] Problem with clamd hanging MTA; software used to pass emails to clam; any patches you have applied (to all, but primarily to clam). Versions of each. even when we use clamdscan it hangs, so our mta has nothing to do with the problem. havving a bit of trouble with gdb configuration it aint working. but still working on it ___ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users ___ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
Re: [Clamav-users] Problem with clamd hanging
Trog [EMAIL PROTECTED] Date: Tue, 25 Jan 2005 11:27:01 GMT Subject: Re: [Clamav-users] Problem with clamd hanging On Tue, 2005-01-25 at 12:22 +0100, [EMAIL PROTECTED] wrote: =20 Btw I did a truss a few days ago on the hanging process and it was stoppe= d in an accept syscall. =20 Thats normal behaviour. A gdb backtrace of each thread when it is hanging is the most helpful thing at the moment. I just checked, and the problem is that clamd no more hangs but disapear. So it may crash. The problem is that it does run with / as current dir but not as uid root. So it can't core dumps. I'm wondering what I can do... f.g. ___ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
Re: [Clamav-users] Problem with clamd hanging
On Tue, 2005-01-25 at 16:08 +0100, [EMAIL PROTECTED] wrote: I just checked, and the problem is that clamd no more hangs but disapear. So it may crash. The problem is that it does run with / as current dir but not as uid root. So it can't core dumps. I'm wondering what I can do... You must use attach gdb to the running clamd process and then wait for it to mis-behave: Something like the following should work out ok: 1. Use 'ps' to get the PID of clamd: ps -aux (ps -elf on SYSV) clamav 24897 0.0 1.9 38032 10068 ? SJan13 0:00 clamd ^ pid 2. Attach gdb to the running process gdb /usr/local/bin/clamd 24897 ^--- path to ^--- process id, from above clamd binary 3. you should now get the gdb prompt, as: (gdb) 4. type the command 'cont' to continue normal operation 5. wait for crash 6. you should now get the gdb prompt, as: (gdb) 7. the command 'bt' will give a backtrace for the current thread. The command 'info threads' will tell you how many threads there are. The command 'thread n' will change to the specified thread, after which you can use the 'bt' command again to get it's backtrace. So, you basically want to do: a. 'info threads' to get the number of threads and their id numbers b. for each thread do: thread id number bt 8. exit from gdb with the 'quit' command. Reply 'y' to the question about the program still running. -trog signature.asc Description: This is a digitally signed message part ___ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
Re: [Clamav-users] Problem with clamd hanging
On Tue, 25 Jan 2005 17:48:08 +0100 [EMAIL PROTECTED] wrote: Trog [EMAIL PROTECTED] Thats normal behaviour. A gdb backtrace of each thread when it is hanging is the most helpful thing at the moment. Ok, so I did not use gdb as gdb core dump (maybe because I compiled clamav with sun cc). I used dbx and here is the backtrace : I can send you the email that was scanned. =[1] __zzip_find_disk_trailer(fd = 12, filesize = 31981, trailer = 0xfeb7b29e, io = 0xff30c2b0), line 289 in zzip-zip.c This is a known problem when using Sun's cc. Recompile with gcc. -- oo. Tomasz Kojm [EMAIL PROTECTED] (\/)\. http://www.ClamAV.net/gpg/tkojm.gpg \..._ 0DCA5A08407D5288279DB43454822DC8985A444B //\ /\ Tue Jan 25 18:09:19 CET 2005 pgp0NCTcUQ5aJ.pgp Description: PGP signature ___ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
Re: [Clamav-users] Problem with clamd hanging
Tomasz Kojm [EMAIL PROTECTED] Date: Tue, 25 Jan 2005 11:46:21 +0100 Subject: Re: [Clamav-users] Problem with clamd hanging --===0580729670== Content-Type: multipart/signed; protocol=application/pgp-signature; micalg=pgp-sha1; boundary=Signature=_Tue__25_Jan_2005_11_46_21_+0100_blOhG=eoymkvrdcT --Signature=_Tue__25_Jan_2005_11_46_21_+0100_blOhG=eoymkvrdcT Content-Type: text/plain; charset=US-ASCII Content-Disposition: inline Content-Transfer-Encoding: 7bit On Tue, 25 Jan 2005 10:00:13 +0100 [EMAIL PROTECTED] wrote: I have tried with 0.81rc1 + zlib 1.2.2 and still hang several times this night. We can't help you unless you provide some useful information (backtraces, etc.). I'll do that, but for now you just asked me to try zlib 1.2.2 and 0.81rc1. I'll try to see the backtrace. Btw I did a truss a few days ago on the hanging process and it was stopped in an accept syscall. f.g. ___ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
Re: [Clamav-users] Problem with clamd hanging
- Original Message - From: [EMAIL PROTECTED] To: ClamAV users ML clamav-users@lists.clamav.net Sent: Monday, January 24, 2005 1:13 PM Subject: Re: [Clamav-users] Problem with clamd hanging Trog [EMAIL PROTECTED] Date: Fri, 21 Jan 2005 16:27:51 GMT Subject: Re: [Clamav-users] Problem with clamd hanging --===1591423761== Content-Type: multipart/signed; micalg=pgp-sha1; protocol=application/pgp-signature; boundary==-kxvkl7u/uvATrEmpmLSY --=-kxvkl7u/uvATrEmpmLSY Content-Type: text/plain Content-Transfer-Encoding: quoted-printable On Fri, 2005-01-21 at 17:24 +0100, Frederic Goudal wrote: =20 I'm using 1.2.1 I'll try 1.2.2 monday, than the 0.81 if it does not work. =20 I would definitely do that. 1.2.1 has a known crashing bug. It was not crashing. But I did switch to 1.2.2 and it does not solve the problem. It hanged after 2 hours. Btw it seems that it occurs on specific mails, as it seems to hang 2 or three time in a row, than works for 2 hours or more... I'll try to compile the 0.81rc1 f.g. We also have a problem with clamd stalling, and then qmail rejects all incoming mail. WE are using an old version of zlib (zlib-1.1.4-8.7x). This activity seems random, and we haven't been able to reproduce this. I have browsed the list archieve and seen numerous people with the same problem but it seems there is no concrete answer to fix this. Hopefully someone can get to the bottom of this one :) sb ___ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users ___ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
Re: [Clamav-users] Problem with clamd hanging
[EMAIL PROTECTED] wrote: It was not crashing. But I did switch to 1.2.2 and it does not solve the problem. It hanged after 2 hours. Btw it seems that it occurs on specific mails, as it seems to hang 2 or three time in a row, than works for 2 hours or more... I'll try to compile the 0.81rc1 I tested 0.81rc1 with zlib 1.2.2.2 on linux and clamd stops respond after several hours/days to clients (clamav-milter, clamdscan) requests. There must be STREAM related problem, I think. Petr ___ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
Re: [Clamav-users] Problem with clamd hanging
On Mon, 24 Jan 2005 13:31:16 +0100 KriĀtof Petr [EMAIL PROTECTED] wrote: I tested 0.81rc1 with zlib 1.2.2.2 on linux and clamd stops respond after several hours/days to clients (clamav-milter, clamdscan) requests. There must be STREAM related problem, I think. It's rather a SESSION related bug. See my yesterday's post on a temporary workaround for this problem. -- oo. Tomasz Kojm [EMAIL PROTECTED] (\/)\. http://www.ClamAV.net/gpg/tkojm.gpg \..._ 0DCA5A08407D5288279DB43454822DC8985A444B //\ /\ Mon Jan 24 14:58:36 CET 2005 pgpRKtV8g2kPC.pgp Description: PGP signature ___ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
Re: [Clamav-users] Problem with clamd hanging
- Original Message - From: Tomasz Kojm [EMAIL PROTECTED] To: ClamAV users ML clamav-users@lists.clamav.net Sent: Monday, January 24, 2005 3:59 PM Subject: Re: [Clamav-users] Problem with clamd hanging It's rather a SESSION related bug. See my yesterday's post on a temporary workaround for this problem. This fix was related to clamav-milter right? We don't use it, don't have the milter package installed at all (built own rpm from source), so should we install the milter package(with the fix) to fix the clamd bug? ___ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users ___ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
Re: [Clamav-users] Problem with clamd hanging
On Mon, 24 Jan 2005 16:24:16 +0200 Shaun Bugler [EMAIL PROTECTED] wrote: It's rather a SESSION related bug. See my yesterday's post on a temporary workaround for this problem. This fix was related to clamav-milter right? We don't use it, don't have the milter package installed at all (built own rpm from source), so should we install the milter package(with the fix) to fix the clamd bug? In your case it's rather a zlib problem. Make sure you have installed the new version properly - by default its Makefile only installs the static library. -- oo. Tomasz Kojm [EMAIL PROTECTED] (\/)\. http://www.ClamAV.net/gpg/tkojm.gpg \..._ 0DCA5A08407D5288279DB43454822DC8985A444B //\ /\ Mon Jan 24 15:29:43 CET 2005 pgpF0cvIciNHR.pgp Description: PGP signature ___ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
Re: [Clamav-users] Problem with clamd hanging
On Fri, 2005-01-21 at 11:36 +0100, [EMAIL PROTECTED] wrote: Hello, I'm running clamd (clamav 0.80) on a solaris 9 server in front of amavisd 2.2.1 with a local unix socket. About 2 hours after we start clamd it stops accepting requests. The daemon is running, there is non special message either in amavis log or clamd log. It does not work either with clamdscan with a connection refused message. I have not seen any thing about such problem in the mailing-list archive. Check which version of zlib you are using, install 1.2.2. Then I suggest you try version 0.81rc1 -trog signature.asc Description: This is a digitally signed message part ___ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
Re: [Clamav-users] Problem with clamd hanging
Trog [EMAIL PROTECTED] Date: Fri, 21 Jan 2005 16:16:51 GMT Subject: Re: [Clamav-users] Problem with clamd hanging On Fri, 2005-01-21 at 11:36 +0100, [EMAIL PROTECTED] wrote: =20 Hello, =20 I'm running clamd (clamav 0.80) on a solaris 9 server in front of amavisd= =20 2.2.1 with a local unix socket. =20 About 2 hours after we start clamd it stops accepting requests. The daemo= n is=20 running, there is non special message either in amavis log or clamd log. =20 It does not work either with clamdscan with a connection refused message.= I=20 have not seen any thing about such problem in the mailing-list archive. Check which version of zlib you are using, install 1.2.2. Then I suggest you try version 0.81rc1 THanks. I'm using 1.2.1 I'll try 1.2.2 monday, than the 0.81 if it does not work. f.g. ___ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
Re: [Clamav-users] Problem with clamd hanging
On Fri, 2005-01-21 at 17:24 +0100, Frederic Goudal wrote: I'm using 1.2.1 I'll try 1.2.2 monday, than the 0.81 if it does not work. I would definitely do that. 1.2.1 has a known crashing bug. -trog signature.asc Description: This is a digitally signed message part ___ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
RE:[Clamav-users] Problem with clamd hanging
I have been running clamav 0.80 on solaris with local unix socket since October. Clamd stops accepting requests for me as well, but it's sporadic unlike yours. It usually runs 1 to 3 weeks at a time without a problem. I have a cron check and restart if it's doesn't respond. ___ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
