Clamav Ping Timeout During Update

Julian Field MailScanner at ecs.soton.ac.uk
Mon Mar 3 17:56:49 GMT 2008


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1



Neal Morgan wrote:
> Greetings:
>
> My Mailscanner has been reporting timeouts when clamav updates its
> database.  I see entries like this in syslog:
>
> 2008-03-03 08:41:10.000	Server-05	MailScanner[20773]:
> Clamd::ERROR:: CLAM PING TIMED OUT! :: .
>
>
> If I review the clamav log, it seems that the timeout always occurs
> within several seconds of the "database reloaded" entry:
>
> Mon Mar  3 08:30:21 2008 -> SelfCheck: Database modification detected.
> Forcing reload.
> Mon Mar  3 08:30:21 2008 -> Reading databases from /var/lib/clamav
> Mon Mar  3 08:41:09 2008 -> Database correctly reloaded (223704
> signatures)
>   
The ping timeout is set to 90 seconds. This should be way more than is 
needed for a database reload. You are welcome to try increasing it, look 
for the setting of the variable "PingTimeOut" in SweepViruses.pm.

>
> I wouldn't care too much about this, except any messages passing through
> MailScanner during that same several second period get marked as virus
> infected with "Denial of Service" as the virus report.
>
> I am running Mailscanner on 5 servers, all Debian etch, all using the
> package maintainer's clamav and all using MailScanner-4.66.5-3 built
> from source.  All 5 are experiencing the same issue.
>
> Any suggestions?
>
>
>
> Best Regards,
>
> Neal Morgan
>   

Jules

- -- 
Julian Field MEng CITP CEng
www.MailScanner.info
Buy the MailScanner book at www.MailScanner.info/store

MailScanner customisation, or any advanced system administration help?
Contact me at Jules at Jules.FM

PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
PGP public key: http://www.jules.fm/julesfm.asc


-----BEGIN PGP SIGNATURE-----
Version: PGP Desktop 9.8.1 (Build 2523)
Comment: Use Thunderbird Enigmail to verify this message
Charset: ISO-8859-1

wj8DBQFHzDvjEfZZRxQVtlQRArzVAKCDduYI28R1BbHstzAN7mLPomLl9wCfYKYD
9vA90EYZaf/xrjjJtDSdPkE=
=Jspj
-----END PGP SIGNATURE-----

-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.



More information about the MailScanner mailing list