[clamav-users] clamav-0.98.1 crashing

Richard Mealing richard at fastnet.co.uk
Tue May 20 16:29:05 UTC 2014 

Thank you Steve,

I'm not sure if there is a problem but I would like to know why I see my clamd stops then starts every 10 minutes.

During this period, I see the following debug output and I wondering what this means -

fds_poll_recv: timeout after 600 seconds

I thought it was something to do with the setting 'SelfCheck' but I changed this to 3600 and I still see the program restart every 10 minutes.

Debug output -

Tue May 20 14:59:55 2014 -> Received POLLIN|POLLHUP on fd 4
Tue May 20 14:59:55 2014 -> Got new connection, FD 9
Tue May 20 14:59:55 2014 -> Received POLLIN|POLLHUP on fd 5
Tue May 20 14:59:55 2014 -> fds_poll_recv: timeout after 7 seconds
Tue May 20 14:59:55 2014 -> Received POLLIN|POLLHUP on fd 9
Tue May 20 14:59:55 2014 -> got command PING (4, 6), argument:
Tue May 20 14:59:55 2014 -> Receive thread: closing conn (FD 9), group finished
Tue May 20 14:59:55 2014 -> Consumed entire command
Tue May 20 14:59:55 2014 -> Number of file descriptors polled: 1 fds
Tue May 20 14:59:55 2014 -> fds_poll_recv: timeout after 600 seconds
Tue May 20 14:59:55 2014 -> Received POLLIN|POLLHUP on fd 4
Tue May 20 14:59:55 2014 -> Got new connection, FD 9
Tue May 20 14:59:55 2014 -> Received POLLIN|POLLHUP on fd 5
Tue May 20 14:59:55 2014 -> fds_poll_recv: timeout after 7 seconds
Tue May 20 14:59:55 2014 -> Received POLLIN|POLLHUP on fd 9
Tue May 20 14:59:55 2014 -> got command MULTISCAN /tmpfs/82078 (22, 10), argument: /tmpfs/82078
Tue May 20 14:59:55 2014 -> mode -> MODE_WAITREPLY
Tue May 20 14:59:55 2014 -> THRMGR: queue (single) crossed low threshold -> signaling
Tue May 20 14:59:55 2014 -> THRMGR: queue (bulk) crossed low threshold -> signaling
Tue May 20 14:59:55 2014 -> Breaking command loop, mode is no longer MODE_COMMAND
Tue May 20 14:59:55 2014 -> Consumed entire command
Tue May 20 14:59:55 2014 -> Number of file descriptors polled: 1 fds
Tue May 20 14:59:55 2014 -> fds_poll_recv: timeout after 600 seconds
Tue May 20 14:59:55 2014 -> THRMGR: new group: 0x81941e5b0
Tue May 20 14:59:55 2014 -> THRMGR: active jobs for 0x81941e5b0: 2
Tue May 20 14:59:55 2014 -> THRMGR: active jobs for 0x81941e5b0: 3
Tue May 20 14:59:55 2014 -> THRMGR: queue (single) crossed low threshold -> signaling
Tue May 20 14:59:55 2014 -> THRMGR: queue (bulk) crossed low threshold -> signaling
Tue May 20 14:59:55 2014 -> THRMGR: queue (single) crossed low threshold -> signaling
Tue May 20 14:59:55 2014 -> THRMGR: queue (bulk) crossed low threshold -> signaling
Tue May 20 14:59:55 2014 -> THRMGR: active jobs for 0x81941e5b0: 4
Tue May 20 14:59:55 2014 -> THRMGR: active jobs for 0x81941e5b0: 5
Tue May 20 14:59:55 2014 -> THRMGR: queue (single) crossed low threshold -> signaling
Tue May 20 14:59:55 2014 -> THRMGR: queue (bulk) crossed low threshold -> signaling
Tue May 20 14:59:55 2014 -> THRMGR: queue (single) crossed low threshold -> signaling
Tue May 20 14:59:55 2014 -> THRMGR: queue (bulk) crossed low threshold -> signaling
Tue May 20 14:59:55 2014 -> Finished scanthread
Tue May 20 14:59:55 2014 -> THRMGR: group_finished: 0x81941e5b0, 5
Tue May 20 14:59:55 2014 -> THRMGR: active jobs for 0x81941e5b0: 4
Tue May 20 14:59:55 2014 -> THRMGR: queue (single) crossed low threshold -> signaling
Tue May 20 14:59:55 2014 -> THRMGR: queue (bulk) crossed low threshold -> signaling
Tue May 20 14:59:55 2014 -> Finished scanthread
Tue May 20 14:59:55 2014 -> THRMGR: group_finished: 0x81941e5b0, 4
Tue May 20 14:59:55 2014 -> THRMGR: active jobs for 0x81941e5b0: 3
Tue May 20 14:59:55 2014 -> THRMGR: queue (single) crossed low threshold -> signaling
Tue May 20 14:59:55 2014 -> THRMGR: queue (bulk) crossed low threshold -> signaling
Tue May 20 14:59:55 2014 -> /tmpfs/82078/s4KDxmlg001866.message: Sanesecurity.Jurlbl.7983.UNOFFICIAL FOUND
Tue May 20 14:59:55 2014 -> Finished scanthread
Tue May 20 14:59:55 2014 -> THRMGR: group_finished: 0x81941e5b0, 3
Tue May 20 14:59:55 2014 -> THRMGR: active jobs for 0x81941e5b0: 2
Tue May 20 14:59:55 2014 -> THRMGR: queue (single) crossed low threshold -> signaling
Tue May 20 14:59:55 2014 -> THRMGR: queue (bulk) crossed low threshold -> signaling
Tue May 20 14:59:55 2014 -> /tmpfs/82078/s4KDxmlg001866.header: Sanesecurity.Junk.40915.UNOFFICIAL FOUND
Tue May 20 14:59:55 2014 -> Finished scanthread
Tue May 20 14:59:55 2014 -> THRMGR: group_finished: 0x81941e5b0, 2
Tue May 20 14:59:55 2014 -> THRMGR: active jobs for 0x81941e5b0: 1
Tue May 20 14:59:55 2014 -> THRMGR: queue (single) crossed low threshold -> signaling
Tue May 20 14:59:55 2014 -> THRMGR: queue (bulk) crossed low threshold -> signaling
Tue May 20 14:59:55 2014 -> THRMGR: group finished freeing 0x81941e5b0
Tue May 20 14:59:55 2014 -> Finished scanthread
Tue May 20 14:59:55 2014 -> Scanthread: connection shut down (FD 9)
Tue May 20 14:59:55 2014 -> THRMGR: queue (single) crossed low threshold -> signaling
Tue May 20 14:59:55 2014 -> THRMGR: queue (bulk) crossed low threshold -> signaling
Tue May 20 14:59:56 2014 -> Received POLLIN|POLLHUP on fd 4
Tue May 20 14:59:56 2014 -> Got new connection, FD 9
Tue May 20 14:59:56 2014 -> Received POLLIN|POLLHUP on fd 5
Tue May 20 14:59:56 2014 -> fds_poll_recv: timeout after 7 seconds
Tue May 20 14:59:56 2014 -> Received POLLIN|POLLHUP on fd 9
Tue May 20 14:59:56 2014 -> got command PING (4, 6), argument:
Tue May 20 14:59:56 2014 -> Receive thread: closing conn (FD 9), group finished
Tue May 20 14:59:56 2014 -> Consumed entire command
Tue May 20 14:59:56 2014 -> Number of file descriptors polled: 1 fds
Tue May 20 14:59:56 2014 -> fds_poll_recv: timeout after 600 seconds
Tue May 20 14:59:56 2014 -> Received POLLIN|POLLHUP on fd 4
Tue May 20 14:59:56 2014 -> Got new connection, FD 9
Tue May 20 14:59:56 2014 -> Received POLLIN|POLLHUP on fd 5
Tue May 20 14:59:56 2014 -> fds_poll_recv: timeout after 7 seconds
Tue May 20 14:59:56 2014 -> Received POLLIN|POLLHUP on fd 9
Tue May 20 14:59:56 2014 -> got command MULTISCAN /tmpfs/76394 (22, 10), argument: /tmpfs/76394
Tue May 20 14:59:56 2014 -> mode -> MODE_WAITREPLY
Tue May 20 14:59:56 2014 -> Breaking command loop, mode is no longer MODE_COMMAND
Tue May 20 14:59:56 2014 -> Consumed entire command
Tue May 20 14:59:56 2014 -> Number of file descriptors polled: 1 fds
Tue May 20 14:59:56 2014 -> fds_poll_recv: timeout after 600 seconds
Tue May 20 14:59:56 2014 -> THRMGR: queue (single) crossed low threshold -> signaling
Tue May 20 14:59:56 2014 -> THRMGR: queue (bulk) crossed low threshold -> signaling
Tue May 20 14:59:56 2014 -> THRMGR: new group: 0x8164c07c0
Tue May 20 14:59:56 2014 -> THRMGR: active jobs for 0x8164c07c0: 2
Tue May 20 14:59:56 2014 -> THRMGR: active jobs for 0x8164c07c0: 3
Tue May 20 14:59:56 2014 -> THRMGR: queue (single) crossed low threshold -> signaling
Tue May 20 14:59:56 2014 -> THRMGR: queue (bulk) crossed low threshold -> signaling
Tue May 20 14:59:56 2014 -> THRMGR: queue (single) crossed low threshold -> signaling
Tue May 20 14:59:56 2014 -> THRMGR: queue (bulk) crossed low threshold -> signaling
Tue May 20 14:59:56 2014 -> THRMGR: active jobs for 0x8164c07c0: 4
Tue May 20 14:59:56 2014 -> THRMGR: active jobs for 0x8164c07c0: 5
Tue May 20 14:59:56 2014 -> THRMGR: queue (single) crossed low threshold -> signaling
Tue May 20 14:59:56 2014 -> THRMGR: queue (bulk) crossed low threshold -> signaling
Tue May 20 14:59:56 2014 -> THRMGR: queue (single) crossed low threshold -> signaling
Tue May 20 14:59:56 2014 -> THRMGR: queue (bulk) crossed low threshold -> signaling
Tue May 20 14:59:56 2014 -> Finished scanthread
Tue May 20 14:59:56 2014 -> THRMGR: group_finished: 0x8164c07c0, 5
Tue May 20 14:59:56 2014 -> THRMGR: active jobs for 0x8164c07c0: 4
Tue May 20 14:59:56 2014 -> THRMGR: queue (single) crossed low threshold -> signaling
Tue May 20 14:59:56 2014 -> THRMGR: queue (bulk) crossed low threshold -> signaling
Tue May 20 14:59:56 2014 -> Finished scanthread
Tue May 20 14:59:56 2014 -> THRMGR: group_finished: 0x8164c07c0, 4
Tue May 20 14:59:56 2014 -> THRMGR: active jobs for 0x8164c07c0: 3
Tue May 20 14:59:56 2014 -> THRMGR: queue (single) crossed low threshold -> signaling
Tue May 20 14:59:56 2014 -> THRMGR: queue (bulk) crossed low threshold -> signaling
Tue May 20 14:59:56 2014 -> Finished scanthread
Tue May 20 14:59:56 2014 -> THRMGR: group_finished: 0x8164c07c0, 3
Tue May 20 14:59:56 2014 -> THRMGR: active jobs for 0x8164c07c0: 2
Tue May 20 14:59:56 2014 -> THRMGR: queue (single) crossed low threshold -> signaling
Tue May 20 14:59:56 2014 -> THRMGR: queue (bulk) crossed low threshold -> signaling
Tue May 20 14:59:56 2014 -> Finished scanthread
Tue May 20 14:59:56 2014 -> THRMGR: group_finished: 0x8164c07c0, 2
Tue May 20 14:59:56 2014 -> THRMGR: active jobs for 0x8164c07c0: 1
Tue May 20 14:59:56 2014 -> THRMGR: queue (single) crossed low threshold -> signaling
Tue May 20 14:59:56 2014 -> THRMGR: queue (bulk) crossed low threshold -> signaling
Tue May 20 14:59:56 2014 -> THRMGR: group finished freeing 0x8164c07c0
Tue May 20 14:59:56 2014 -> Finished scanthread
Tue May 20 14:59:56 2014 -> Scanthread: connection shut down (FD 9)
Tue May 20 14:59:56 2014 -> THRMGR: queue (single) crossed low threshold -> signaling
Tue May 20 14:59:56 2014 -> THRMGR: queue (bulk) crossed low threshold -> signaling
Tue May 20 14:59:59 2014 -> Received POLLIN|POLLHUP on fd 4
Tue May 20 14:59:59 2014 -> Got new connection, FD 9
Tue May 20 14:59:59 2014 -> Received POLLIN|POLLHUP on fd 5
Tue May 20 14:59:59 2014 -> fds_poll_recv: timeout after 7 seconds
Tue May 20 14:59:59 2014 -> Received POLLIN|POLLHUP on fd 9
Tue May 20 14:59:59 2014 -> got command PING (4, 6), argument:
Tue May 20 14:59:59 2014 -> Receive thread: closing conn (FD 9), group finished
Tue May 20 14:59:59 2014 -> Consumed entire command
Tue May 20 14:59:59 2014 -> Number of file descriptors polled: 1 fds
Tue May 20 14:59:59 2014 -> fds_poll_recv: timeout after 600 seconds
Tue May 20 14:59:59 2014 -> Received POLLIN|POLLHUP on fd 4
Tue May 20 14:59:59 2014 -> Got new connection, FD 9
Tue May 20 14:59:59 2014 -> Received POLLIN|POLLHUP on fd 5
Tue May 20 14:59:59 2014 -> fds_poll_recv: timeout after 7 seconds
Tue May 20 14:59:59 2014 -> Received POLLIN|POLLHUP on fd 9
Tue May 20 14:59:59 2014 -> got command MULTISCAN /tmpfs/83306 (22, 10), argument: /tmpfs/83306
Tue May 20 14:59:59 2014 -> mode -> MODE_WAITREPLY
Tue May 20 14:59:59 2014 -> Breaking command loop, mode is no longer MODE_COMMAND
Tue May 20 14:59:59 2014 -> Consumed entire command
Tue May 20 14:59:59 2014 -> Number of file descriptors polled: 1 fds
Tue May 20 14:59:59 2014 -> fds_poll_recv: timeout after 600 seconds
Tue May 20 14:59:59 2014 -> THRMGR: queue (single) crossed low threshold -> signaling
Tue May 20 14:59:59 2014 -> THRMGR: queue (bulk) crossed low threshold -> signaling
Tue May 20 14:59:59 2014 -> THRMGR: new group: 0x8163b3a60
Tue May 20 14:59:59 2014 -> THRMGR: active jobs for 0x8163b3a60: 2
Tue May 20 14:59:59 2014 -> THRMGR: active jobs for 0x8163b3a60: 3
Tue May 20 14:59:59 2014 -> THRMGR: queue (single) crossed low threshold -> signaling
Tue May 20 14:59:59 2014 -> THRMGR: queue (bulk) crossed low threshold -> signaling
Tue May 20 14:59:59 2014 -> THRMGR: queue (single) crossed low threshold -> signaling
Tue May 20 14:59:59 2014 -> THRMGR: queue (bulk) crossed low threshold -> signaling
Tue May 20 14:59:59 2014 -> THRMGR: active jobs for 0x8163b3a60: 4
Tue May 20 14:59:59 2014 -> THRMGR: active jobs for 0x8163b3a60: 5
Tue May 20 14:59:59 2014 -> THRMGR: queue (single) crossed low threshold -> signaling
Tue May 20 14:59:59 2014 -> THRMGR: queue (bulk) crossed low threshold -> signaling
Tue May 20 14:59:59 2014 -> THRMGR: queue (single) crossed low threshold -> signaling
Tue May 20 14:59:59 2014 -> THRMGR: queue (bulk) crossed low threshold -> signaling
Tue May 20 14:59:59 2014 -> Finished scanthread
Tue May 20 14:59:59 2014 -> THRMGR: group_finished: 0x8163b3a60, 5
Tue May 20 14:59:59 2014 -> THRMGR: active jobs for 0x8163b3a60: 4
Tue May 20 14:59:59 2014 -> THRMGR: queue (single) crossed low threshold -> signaling
Tue May 20 14:59:59 2014 -> THRMGR: queue (bulk) crossed low threshold -> signaling
Tue May 20 14:59:59 2014 -> Finished scanthread
Tue May 20 14:59:59 2014 -> THRMGR: group_finished: 0x8163b3a60, 4
Tue May 20 14:59:59 2014 -> THRMGR: active jobs for 0x8163b3a60: 3
Tue May 20 14:59:59 2014 -> THRMGR: queue (single) crossed low threshold -> signaling
Tue May 20 14:59:59 2014 -> THRMGR: queue (bulk) crossed low threshold -> signaling
Tue May 20 14:59:59 2014 -> Finished scanthread
Tue May 20 14:59:59 2014 -> THRMGR: group_finished: 0x8163b3a60, 3
Tue May 20 14:59:59 2014 -> THRMGR: active jobs for 0x8163b3a60: 2
Tue May 20 14:59:59 2014 -> THRMGR: queue (single) crossed low threshold -> signaling
Tue May 20 14:59:59 2014 -> THRMGR: queue (bulk) crossed low threshold -> signaling
Tue May 20 14:59:59 2014 -> Finished scanthread
Tue May 20 14:59:59 2014 -> THRMGR: group_finished: 0x8163b3a60, 2
Tue May 20 14:59:59 2014 -> THRMGR: active jobs for 0x8163b3a60: 1
Tue May 20 14:59:59 2014 -> THRMGR: queue (single) crossed low threshold -> signaling
Tue May 20 14:59:59 2014 -> THRMGR: queue (bulk) crossed low threshold -> signaling
Tue May 20 14:59:59 2014 -> THRMGR: group finished freeing 0x8163b3a60
Tue May 20 14:59:59 2014 -> Finished scanthread
Tue May 20 14:59:59 2014 -> Scanthread: connection shut down (FD 9)
Tue May 20 14:59:59 2014 -> THRMGR: queue (single) crossed low threshold -> signaling
Tue May 20 14:59:59 2014 -> THRMGR: queue (bulk) crossed low threshold -> signaling

Thanks,
Rich


-----Original Message-----
From: clamav-users-bounces at lists.clamav.net [mailto:clamav-users-bounces at lists.clamav.net] On Behalf Of Steven Morgan
Sent: 20 May 2014 16:39
To: ClamAV users ML
Subject: Re: [clamav-users] clamav-0.98.1 crashing

Hi Rich,

Any details will help for starters, such as a stack trace of the crash, clamav version, OS version, processor architecture, clamav debug logs, etc.

Also, you could try the 0.98.4 release candidate, which is a bug fix release. It is here:

http://sourceforge.net/projects/clamav/files/RC/clamav-0.98.4-rc1/

If you find that it is a clamav problem, open a bugzilla ticket here:

https://bugzilla.clamav.net/

Thanks,
Steve



On Tue, May 20, 2014 at 6:31 AM, Richard Mealing <richard at fastnet.co.uk>wrote:

> Hi,
>
> I'm using clamd with mailscanner and it keeps crashing. What is the
> best way to debug this?
>
>
> Thanks,
> Rich
> _______________________________________________
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
> http://www.clamav.net/support/ml
>
_______________________________________________
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq
http://www.clamav.net/support/ml

More information about the clamav-users mailing list