Re: timeout problem....
Bill Earle <[email protected]>
| Newsgroups | gmane.comp.security.virus.vtools |
|---|---|
| Message-ID | <[email protected]> |
We had experienced the same problem, there is a timer that is expiring
and the sophie proccess kills itself off. I do not remember the
exact details, but if my memory isn't failing, the timer was not
counting for idle time, but scanning time. This sounds like both machines
started sophie at about the same time and the timeouts are expiring
together, this is probably still the case.
We disable the timeout with no problems by building sophie with the
configure option setting: "--with-timeout=0".
description:
--with-timeout=SECONDS scanning timeout [300]"
>From what I remember the problem is basically
harmless, but why bother spawning new child proc.'s if you do not need
too? We also set the max. proc.s to 600.
- Bill
On Fri, 23 Jan 2004, Sebastian Hagedorn wrote:
> --On Freitag, 23. Januar 2004 13:43 Uhr +0000 Nigel Cass
> <[email protected]> wrote:
>
> > However as of a couple of days ago 2 identical servers started to
> > regularly report errors as below to the syslog.....
> >
> > Jan 21 16:03:58 clapton sophie[4178]: [ID 203278 mail.error] Sophie child
> > has timed-out (no data received in 300 seconds) - process killed
> > Jan 21 16:03:58 clapton sophie[4177]: [ID 203278 mail.error] Sophie child
> > has timed-out (no data received in 300 seconds) - process killed
> > Jan 21 16:15:54 clapton sophie[6391]: [ID 203278 mail.error] Sophie child
> > has timed-out (no data received in 300 seconds) - process killed
> > Jan 21 16:15:54 clapton sophie[6394]: [ID 203278 mail.error] Sophie child
> > has timed-out (no data received in 300 seconds) - process killed
> > Jan 21 16:24:30 clapton sophie[7781]: [ID 203278 mail.error] Sophie child
> > has timed-out (no data received in 300 seconds) - process killed
> > Jan 21 16:30:02 clapton sophie[8598]: [ID 203278 mail.error] Sophie child
> > has timed-out (no data received in 300 seconds) - process killed
> >
> > Checked back and this has not been happening regularly at all until it
> > started at almost exactly the same time on both servers ??
>
> I don't know why it should start all of a sudden, but normally that's
> harmless. All it indicates is that sophie is bored ... there's not enough
> mail for it to scan.
>
> Cheers, Sebastian Hagedorn
> --
> Sebastian Hagedorn M.A. - RZKR-R1 (Gebäude 52), Zimmer 18
> Zentrum für angewandte Informatik - Universitätsweiter Service RRZK
> Universität zu Köln / Cologne University - Tel. +49-221-478-5587