<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html; charset=UTF-8" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
On 6/29/11 3:36 AM, Ralf Hildebrandt wrote:
<blockquote cite="mid:20110629073620.GD20792@charite.de" type="cite">
<blockquote type="cite" style="font-size: large; color: rgb(0, 0,
0);">
<pre wrap="">but, if clamav hung on the primary (like it has done twice since
<span class="moz-txt-citetags">> </span>upgrading to 0.97.1),
</pre>
</blockquote>
<pre wrap="">Ah, it's happening to you as well? Happened here twice or three times
already <span class="moz-smiley-s2" title=":("><span>:(</span></span>
</pre>
<blockquote type="cite" style="font-size: large; color: rgb(0, 0,
0);">
<pre wrap=""><span class="moz-txt-citetags">> </span>amavisd just seems to sit there till I totally kill clamd with a
<span class="moz-txt-citetags">> </span>sigsegv.
</pre>
</blockquote>
<pre wrap="">Yeah, same here.
</pre>
</blockquote>
freebsd? amd64? what version of Freebsd?<br>
<br>
I posted to clamav list, and they gave me a POSSIBLE 'fat finger'
that might be causing it.<br>
<br>
I am going to try this below and see if it helps.<br>
<br>
clamav also asked, that once it hangs, can we use this to generate a
core file:<br>
<br>
<pre wrap="">If you still have one of those hung 0.97.1 (or come across in the future) can you run
$ gcore <pid>
This should generate a core file of the hung process that can be investigated later
(as long as you still have the coresponding clamd and libclamav binaries too).
Best regards,
</pre>
<br>
<br>
-------- Original Message --------
<table class="moz-email-headers-table" border="0" cellpadding="0"
cellspacing="0">
<tbody>
<tr>
<th align="RIGHT" valign="BASELINE" nowrap="nowrap">Subject: </th>
<td>Re: [clamav-users] 0.97.1 rumor pile? bad safebrowsing
update file?</td>
</tr>
<tr>
<th align="RIGHT" valign="BASELINE" nowrap="nowrap">Date: </th>
<td>Tue, 28 Jun 2011 22:23:20 +0300</td>
</tr>
<tr>
<th align="RIGHT" valign="BASELINE" nowrap="nowrap">From: </th>
<td>Török Edwin <a class="moz-txt-link-rfc2396E" href="mailto:edwin@clamav.net"><edwin@clamav.net></a></td>
</tr>
<tr>
<th align="RIGHT" valign="BASELINE" nowrap="nowrap">Reply-To:
</th>
<td>ClamAV users ML <a class="moz-txt-link-rfc2396E" href="mailto:clamav-users@lists.clamav.net"><clamav-users@lists.clamav.net></a></td>
</tr>
<tr>
<th align="RIGHT" valign="BASELINE" nowrap="nowrap">To: </th>
<td><a class="moz-txt-link-rfc2396E" href="mailto:clamav-users@lists.clamav.net"><clamav-users@lists.clamav.net></a></td>
</tr>
</tbody>
</table>
<br>
<br>
<pre>On 06/28/2011 10:01 PM, Michael Scheidell wrote:
>
>
> On 6/28/11 2:49 PM, Török Edwin wrote:
>> If you still have one of those hung 0.97.1 (or come across in the future) can you run
>> $ gcore<pid>
>>
>> This should generate a core file of the hung process that can be investigated later
>> (as long as you still have the coresponding clamd and libclamav binaries too).
>>
>> Best regards,
>> --Edwin
>
> yes, but darn clients start whining when they can't get their facebook invites immediately :-)
>
> trying to reproduce in lab with daily and safebrowsing files, also, trying with the emails that made it hang.
>
> left some backup systems still running 0.97.1 in the field.. if a backup system fails, we can leave it hung till we figure out what happened.
>
> so, WHAT that might affect threading did you change from 0.97 to 0.97.1? also, this affected boxes running TCP socket, as well as running unix sock.
>
> and, only on amd64 boxes.. all the i386/32bix boxes are fine.
>
>
Maybe this one:
<a class="moz-txt-link-freetext" href="http://git.clamav.net/gitweb?p=clamav-devel.git;a=commitdiff;h=bbfe830c935837cfc357541cb307a7b863394abb;hp=d9ff9e65080d7c70de722e174d365d3b2cb312d3">http://git.clamav.net/gitweb?p=clamav-devel.git;a=commitdiff;h=bbfe830c935837cfc357541cb307a7b863394abb;hp=d9ff9e65080d7c70de722e174d365d3b2cb312d3</a>
But it survived a full regression test here (Linux/amd64).
Will go through the code again tomorrow and see if I can make it deadlock.
Best regards,
--Edwin</pre>
<br>
<br>
<div class="moz-signature">-- <br>
Michael Scheidell, CTO<br>
o: 561-999-5000<br>
d: 561-948-2259<br>
<font color="#999999">></font><font color="#cc0000"> <b>| </b></font>SECNAP
Network Security Corporation
<style type="text/css">
<!--
.unnamed1 {
margin: 1em;
padding: 1px;
} -->
</style>
<ul class="unnamed1">
<li>Best Mobile Solutions Product of 2011</li>
<li>Best Intrusion Prevention Product</li>
<li>Hot Company Finalist 2011</li>
<li>Best Email Security Product</li>
<li>Certified SNORT Integrator</li>
</ul>
</div>
<br>
<div id="disclaimer.secnap.com"><hr />
<p>This email has been scanned and certified safe by SpammerTrap®.
<br />For Information please see
<a href="http://www.secnap.com/products/spammertrap/">http://www.secnap.com/products/spammertrap/</a></p> <hr /></div>
<br>
</body>
</html>