[clamav-users] URGENT: Clamd is wedged on multiple installations

Reindl Harald h.reindl at thelounge.net
Fri Jan 26 08:00:38 UTC 2018



Am 26.01.2018 um 08:32 schrieb Dianne Skoll:
> Something went badly wrong with clamd recently; it's stuck with
> hundreds/thousands of open files per process and interrupting mail flow.
> 
> When a scanning thread finishes, I see this in the strace output.
> (I ran clamdscan /etc/hosts as a test):
> 
> [pid  3707] 02:11:01 sendto(295, "/etc/hosts: OK\n", 15, 0, NULL, 0) = 15
> [pid  3707] 02:11:01 shutdown(295, SHUT_RDWR) = 0
> [pid  3707] 02:11:01 close(295)         = 0
> [pid  3707] 02:11:01 futex(0x1933c3c, FUTEX_WAIT_BITSET_PRIVATE|FUTEX_CLOCK_REALTIME, 387, {1516950691, 0}, ffffffff) = -1 ETIMEDOUT (Connection timed out)
> [pid  3707] 02:11:31 futex(0x1933c10, FUTEX_WAKE_PRIVATE, 1) = 0
> [pid  3707] 02:11:31 madvise(0x7fae6affe000, 8368128, MADV_DONTNEED) = 0
> [pid  3707] 02:11:31 _exit(0)           = ?
> [pid  3707] 02:11:31 +++ exited with 0 +++
> 
> So it scans the file, says it's OK. and then hangs in the futex for 30
> seconds.
> 
> HELP!  This is causing major outages for many of our customers

sounds like an issue with the official signatures given that you are not 
the first reporter and that we don't use them and have no problems

freshclam and a custom script downloads anything to 
/var/lib/clamav-download and then for the two "/var/lib/clamav" and 
"/var/lib/clamav-sa" basend on file-lists hardlinks are set - from the 
official only "safebrowsing" is active



More information about the clamav-users mailing list