[clamav-users] clamdscan and TCPAddr

[Micah Snyder (micasnyd)]

Hajo,

Good call testing clamdscan with strace!  That's an interesting issue.  I'm glad to hear that setting TCPAddr solved it for you.


Micah Snyder
ClamAV Development
Talos
Cisco Systems, Inc.


On Aug 7, 2018, at 4:13 AM, Hajo Locke <Hajo.Locke at gmx.de<mailto:Hajo.Locke at gmx.de>> wrote:

Hello List,

have an odd behaviour of clamav. Version is 0.100.1+dfsg-1ubuntu0.16.04.2
Short:
clamscan is able to find a virus in file, clamdscan not. 1st i thought about deprecation of AllowSupplementaryGroups, but was not confirmed.

clamdscan -v tells only about an error, but no detailed info, so I did a strace to clamdscan and found this errormessage:

connect(3, {sa_family=AF_INET6, sin6_port=htons(3310), inet_pton(AF_INET6, "::", &sin6_addr), sin6_flowinfo=0, sin6_scope_id=0}, 28) = -1 EADDRNOTAVAIL (Cannot assign requested address)

In clamd.conf i have:

TCPSocket 3310
By default clamav binds on any configured IP-Adress, i can see this with lsof.
It looks like that clamdscan tries to connect to ipv6 Adress first and ends up in this errormessage and exits, thats my reading of the line.
It is working again if i add "TCPAddr 127.0.0.1" to my clamd.conf.

Is this an expected behaviour? ipv6 is disabled on this machine, clamdscan should not try to use it.

Thanks,
Hajo

_______________________________________________
clamav-users mailing list
clamav-users at lists.clamav.net<mailto:clamav-users at lists.clamav.net>
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.clamav.net/pipermail/clamav-users/attachments/20180809/907e968b/attachment.htm>