Re: URGENT: Clamd is wedged on multiple installations

"Gary R. Schmidt" <[email protected]>
Newsgroups gmane.comp.security.virus.clamav.devel
Message-ID <[email protected]>
On 27/01/2018 00:50, Per Jessen wrote:
> Dianne Skoll wrote:
> 
>> Hi,
>>
>> Something went badly wrong with clamd recently; it's stuck with
>> hundreds/thousands of open files per process and interrupting mail
>> flow.
>>
>> When a scanning thread finishes, I see this in the strace output.
>> (I ran clamdscan /etc/hosts as a test):
>>
>> [pid  3707] 02:11:01 sendto(295, "/etc/hosts: OK\n", 15, 0, NULL, 0) =
>> [15
>> [pid  3707] 02:11:01 shutdown(295, SHUT_RDWR) = 0
>> [pid  3707] 02:11:01 close(295)         = 0
>> [pid  3707] 02:11:01 futex(0x1933c3c,
>> [FUTEX_WAIT_BITSET_PRIVATE|FUTEX_CLOCK_REALTIME, 387, {1516950691, 0},
>> [ffffffff) = -1 ETIMEDOUT (Connection timed out)
>> [pid  3707] 02:11:31 futex(0x1933c10, FUTEX_WAKE_PRIVATE, 1) = 0
>> [pid  3707] 02:11:31 madvise(0x7fae6affe000, 8368128, MADV_DONTNEED) =
>> [0
>> [pid  3707] 02:11:31 _exit(0)           = ?
>> [pid  3707] 02:11:31 +++ exited with 0 +++
>>
>> So it scans the file, says it's OK. and then hangs in the futex for 30
>> seconds.
>>
>> HELP!  This is causing major outages for many of our customers.
> 
> We're seeing something similar - this morning with 0.99.2, later with
> 0.99.3.  I am guessing there is something wrong in the database?
> 
Not seeing any problems here, running 0.99.2 on Solaris 11.3, logs say:
--------------------------------------
Jan 26 23:39:45 paranoia freshclam[4271]: [ID 702911 local6.info] 
Received signal: wake up
Jan 26 23:39:45 paranoia freshclam[4271]: [ID 702911 local6.info] ClamAV 
update process started at Fri Jan 26 23:39:45 2018
Jan 26 23:39:45 paranoia freshclam[4271]: [ID 702911 local6.warning] 
Your ClamAV installation is OUTDATED!
Jan 26 23:39:45 paranoia freshclam[4271]: [ID 702911 local6.warning] 
Local version: 0.99.2 Recommended version: 0.99.3
Jan 26 23:39:45 paranoia freshclam[4271]: [ID 702911 local6.info] DON'T 
PANIC! Read http://www.clamav.net/documents/upgrading-clamav
Jan 26 23:39:46 paranoia freshclam[4271]: [ID 702911 local6.info] 
main.cld is up to date (version: 58, sigs: 4566249, f-level: 60, 
builder: sigmgr)
Jan 26 23:39:46 paranoia freshclam[4271]: [ID 702911 local6.info] 
daily.cld is up to date (version: 24257, sigs: 1835982, f-level: 63, 
builder: neo)
Jan 26 23:39:46 paranoia freshclam[4271]: [ID 702911 local6.info] 
bytecode.cld is up to date (version: 319, sigs: 75, f-level: 63, 
builder: neo)
Jan 26 23:39:46 paranoia freshclam[4271]: [ID 702911 local6.info] 
--------------------------------------

The local date and time there is around 20170126T0239 UTC.

I'm debating updating to 0.99.3, I get sick of seeing the compiler 
warnings, it takes me a while to decide that they're not a problem, it's 
(probably) just sloppy coding.

	Cheers,
		Gary	B-)
_______________________________________________
http://lurker.clamav.net/list/clamav-devel.html
Please submit your patches to our Bugzilla: http://bugs.clamav.net

http://www.clamav.net/contact.html#ml
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.