Re: [Clamav-users] clamd log analyzer recommendation?

2005-09-28 Thread Tomasz Papszun
On Tue, 27 Sep 2005 at 16:50:51 -0400, Bill Baird wrote: Hello All! I'm looking for a log analyzer for my clamd.log file. From the clamav.net 3rd party software page, only one project seems like it will work for me, that being Scan Log Analyzer(link below), but I tested it and it doesn't

RE: [Clamav-users] Issues with ClamAV and RedHat Enterprise 2

2005-09-28 Thread Nigel Horne
On Wed, 2005-09-28 at 02:13, Damian Menscher wrote: If you look up --bounce in man clamav-milter, it says Send a spam to the spoofed sender. This will help advertize ClamAV. Note: this may cause you to be referred to as an `idiot' by clueful mailserver administrators worldwide. No it

Re: [Clamav-users] clamav-milter seems unstable with 0.87

2005-09-28 Thread Trog
On Fri, 2005-09-23 at 09:52 -0500, R. Steven Rainwater wrote: But I guess the big question now is how can determine for sure if it's a specifically formatted email that's causing the clamav crashes and, if so, how can I capture one of the emails? What platform are you using? -trog

RE: [Clamav-users] Issues with ClamAV and RedHat Enterprise 2

2005-09-28 Thread Matthew.van.Eerde
Damian Menscher wrote: On Tue, 27 Sep 2005, [EMAIL PROTECTED] wrote: Dag has it set to spam the spoofed senders Um, does he? By my reading of http://dag.wieers.com/packages/clamav/clamav.spec ... --noreject Rather convenient of you to snip THE NEXT LINE: -obl

RE: [Clamav-users] Issues with ClamAV and RedHat Enterprise 2

2005-09-28 Thread Matthew.van.Eerde
Matthew van Eerde wrote: Damian Menscher wrote: On Tue, 27 Sep 2005, [EMAIL PROTECTED] wrote: Dag has it set to spam the spoofed senders Um, does he? By my reading of http://dag.wieers.com/packages/clamav/clamav.spec ... --noreject Rather convenient of you to snip THE NEXT LINE:

RE: [Clamav-users] Issues with ClamAV and RedHat Enterprise 2

2005-09-28 Thread Damian Menscher
On Wed, 28 Sep 2005, Nigel Horne wrote: On Wed, 2005-09-28 at 02:13, Damian Menscher wrote: If you look up --bounce in man clamav-milter, it says Send a spam to the spoofed sender. This will help advertize ClamAV. Note: this may cause you to be referred to as an `idiot' by clueful

RE: [Clamav-users] Issues with ClamAV and RedHat Enterprise 2

2005-09-28 Thread Christopher X. Candreva
On Wed, 28 Sep 2005, Damian Menscher wrote: No it does not. Retract that statement immediately. Oh, sorry. That's what it says in my (patched) version. The released version may say something different. Personally I like your version better. If the option can't be removed, you should

RE: [Clamav-users] Issues with ClamAV and RedHat Enterprise 2

2005-09-28 Thread Damian Menscher
On Wed, 28 Sep 2005, [EMAIL PROTECTED] wrote: OK, in the interest of fairness, here's the list of flags: %{__cat} EOF clamav-milter.sysconfig ### Simple config file for clamav-milter, you should ### read the documentation and tweak it as you wish. CLAMAV_FLAGS=

[Clamav-users] Version 0.87 installed, outdated message claims 0.86.2

2005-09-28 Thread Don Levey
This seems to be a bizarre error, and one I'm not finding in (recent) past correspondence. I'm getting the following error in my daily logwatch report: Last Status: WARNING: Your ClamAV installation is OUTDATED! WARNING: Local version: 0.86.2 Recommended version:

RE: [Clamav-users] Version 0.87 installed, outdated message claims 0.86.2

2005-09-28 Thread Matthew.van.Eerde
Don Levey wrote: WARNING: Your ClamAV installation is OUTDATED! WARNING: Local version: 0.86.2 Recommended version: 0.87 So why am I being told that this is outdated? Any ideas? Have you killed the running clam processes since you upgraded? -- Matthew.van.Eerde (at)

Re: [Clamav-users] Version 0.87 installed, outdated message claims 0.86.2

2005-09-28 Thread Steven Spence
And clamd -V reports what? ___ http://lurker.clamav.net/list/clamav-users.html

RE: [Clamav-users] Version 0.87 installed, outdated message claims 0.86.2

2005-09-28 Thread Don Levey
[EMAIL PROTECTED] wrote: And clamd -V reports what? That gives me 0.87, just like the others. I didn't kill (or restart) any of the clam processes when I upgraded, but previous upgrades stopped/started the processes as part of the installation (I install from RPM). I only see freshclam as a

RE: [Clamav-users] Issues with ClamAV and RedHat Enterprise 2

2005-09-28 Thread Michael Torrie
On Wed, 2005-09-28 at 12:40 -0500, Damian Menscher wrote: You're right. I was (incorrectly) thinking that --bounce overrides --quiet (which would make more sense than the actual behavior, IMHO, since having options get ignored seems strange, especially when a different behavior that would

RE: [Clamav-users] Issues with ClamAV and RedHat Enterprise 2

2005-09-28 Thread Michael Torrie
On Tue, 2005-09-27 at 18:45 -0500, Damian Menscher wrote: I would recommend NOT running those RPMs, unless you do heavy modification of the configuration. Dag has it set to spam the spoofed senders (WHY IS THIS EVEN A VALID OPTION IN CLAMAV?). I emailed him about getting a reasonable

RE: [Clamav-users] Issues with ClamAV and RedHat Enterprise 2

2005-09-28 Thread Matthew.van.Eerde
Michael Torrie wrote: This is only clam-milter that is affected by the bounce options, right? I run clam in standalone mode using mimedefang as the milter (with custom handling of virus e-mails). Seems to be much better than running just clam-milter. Anyone who is running clamav-milter, I

[Clamav-users] Clamav-milter CPU usage

2005-09-28 Thread Brian Riffle
I recently upgraded ClamAV from .86 to .87. Today, I noticed that clamav-milter is running using 99.6 Cpu utilization. the odd thing is that 47.5% is listed as user, and 53.4% listed as system. I have tried restarting clamav-milter, no luck. It instantly goes back to 100% cpu. my

Re: [Clamav-users] Version 0.87 installed, outdated message claims 0.86.2

2005-09-28 Thread Stephen J. Smoogen
On 9/28/05, Don Levey [EMAIL PROTECTED] wrote: [EMAIL PROTECTED] wrote: And clamd -V reports what? That gives me 0.87, just like the others. I didn't kill (or restart) any of the clam processes when I upgraded, but previous upgrades stopped/started the processes as part of the

Re: [Clamav-users] Clamav-milter CPU usage

2005-09-28 Thread Damian Menscher
On Wed, 28 Sep 2005, Brian Riffle wrote: I recently upgraded ClamAV from .86 to .87. Today, I noticed that clamav-milter is running using 99.6 Cpu utilization. the odd thing is that 47.5% is listed as user, and 53.4% listed as system. I have tried restarting clamav-milter, no luck. It

Re: [Clamav-users] Clamav-milter CPU usage

2005-09-28 Thread Elizabeth Schwartz
Mine's doing the same. Solaris 9, clamav 0.87, blastwave build. I took a look with truss and it seems to be looping doing this over and over and over (I don't se any values changing here): /2: open(/opt/csw/share/clamav, O_RDONLY|O_NDELAY|O_LARGEFILE) = 7 /2: fstat64(7, 0xFEEFBD00) = 0 /2:

Re: [Clamav-users] Clamav-milter CPU usage

2005-09-28 Thread Damian Menscher
On Wed, 28 Sep 2005, Elizabeth Schwartz wrote: Mine's doing the same. Solaris 9, clamav 0.87, blastwave build. I took a look with truss and it seems to be looping doing this over and over and over (I don't se any values changing here): /2: open(/opt/csw/share/clamav,

Re: [Clamav-users] Clamav-milter CPU usage

2005-09-28 Thread James Kosin
-BEGIN PGP SIGNED MESSAGE- Hash: RIPEMD160 Elizabeth Schwartz wrote: |Mine's doing the same. Solaris 9, clamav 0.87, blastwave build. I took a |look with truss and it seems to be looping doing this over and over and over |(I don't se any values changing here): | | |/2:

Re: [Clamav-users] Clamav-milter CPU usage

2005-09-28 Thread Brian Riffle
Interesting... looks to me like the watchdog thread is stuck in a tight loop. It's *supposed* to do that check when: - the milter goes idle - there are no free servers available - once every readTimeout-1 seconds Any chance you put ReadTimeout=0 or ReadTimeout=1 in your clamd.conf?

Re: [Clamav-users] Clamav-milter CPU usage

2005-09-28 Thread James Kosin
-BEGIN PGP SIGNED MESSAGE- Hash: RIPEMD160 Brian Riffle wrote: | | | Interesting... looks to me like the watchdog thread is stuck in a | tight loop. It's *supposed* to do that check when: - the milter | goes idle - there are no free servers available - once every | readTimeout-1

Re: [Clamav-users] Clamav-milter CPU usage

2005-09-28 Thread Elizabeth Schwartz
Thanks all, for the fast responses! I had indeed set ReadTimeout to 0 at some point in the dim past. I have changed it to a positive number and clamav-milter seems MUCH happier. ___ http://lurker.clamav.net/list/clamav-users.html