'Denial Of Service attack detected'

[Peter Bates]

Hello all...

I saw a few of these today:

Oct 25 10:20:06 postbox MailScanner[19328]: Commercial scanner
clamavmodule 
timed out!
Oct 25 10:20:06 postbox MailScanner[19328]: clamavmodule: Failed to
complete, 
timed out
Oct 25 10:20:06 postbox MailScanner[19328]: Virus Scanning: Denial Of
Service 
attack detected!

And ended up with a small gathering of 'clamav-xxxxxx' directories in
/tmp.

Is there any way I can find out which email caused these (on a
relatively busy mail server),
and should I be submitting the files to the ClamAV developers, Julian,
or not be overly
concerned at all?

Thanks.


-- 

--------------------------------------------------------------------------------------------------->
Peter Bates, Systems Support Officer, IT Services.
London School of Hygiene & Tropical Medicine.
Telephone:0207-958 8353 / Fax: 0207- 636 9838