Thank you. That was key. I found I had a permission denied and found out
file ownership of /var/log/clamd/* was an unknown user. I corrected it
and the process is no longer defunct. I have another issue with clam
(possibly), but I will open a new thread for it as it is different from
this issue.
Thanks,
John
> strace -p {processid}
>
> See for the process id 'ps auxf' for example.
>
> --
> Kind regards,
> Harm van Tilborg
>
> j...@finishwork.com wrote:
>> I know how to strace a process manually, but how should I strace this
>> automated process?
>> Thanks,
>> John
>>
>>> I did a strace of the clamav process. You should also take a look at
>>> the
>>> multilog process as well.
>>>
>>> Regards,
>>> E:S
>>>
>>> -----Original Message-----
>>> From: John Harmon [mailto:j...@finishwork.com]
>>> Sent: Montag, 09. März 2009 02:27
>>> To: toaster@shupp.org
>>> Subject: Re: [toaster] multilog in defunct (clamav)
>>>
>>> I tried the latest version of clam, but also had issues. I have the
>>> exact
>>> same version running on another server fine. How should I trace it?
>>> strace? ltrace? other?
>>> Thanks,
>>> John
>>>
>>> Edvin Seferovic wrote:
>>>> Have you tried tracing the process that is producing the high
>>>> utilization on your machine? In my case I had an old version of clamav
>>>> which was hanging due to an update of clamav-db !
>>>>
>>>> Regards,
>>>> E:S
>>>>
>>>> -----Original Message-----
>>>> From: John Harmon [mailto:j...@finishwork.com]
>>>> Sent: Sonntag, 08. März 2009 23:25
>>>> To: toaster@shupp.org
>>>> Subject: Re: [toaster] multilog in defunct (clamav)
>>>>
>>>>
>>>>
>>>>> Hi all,
>>>>>
>>>>> I have everything installed and running fine, but I have multilog
>>>>> (called by clamav) going into defunct state, and then clam hits 100%
>>>>> utilization and stays there. I tried the newest version of clam, but
>>>>> made no difference. If I remove clamd from the /services dir and
>>>>> reboot, everything is normal. Only when I move the file back to the
>>>>> /services dir does multilog go defunct and clam hits high
>>>>> utilization.
>>>>>
>>>>> Any pointers would be appreciated.
>>>>>
>>>>> Thanks,
>>>>> John
>>>>>
>>>> Anyone?
>>>>
>>>>
>>>
>>
>>
>
