clamd keeps dying after cron

Forum for getting help with Project Gamera, Spamassassin, Clamav, qmail-scanner and other anti-spam tools.
Post Reply
modom46
Forum Regular
Forum Regular
Posts: 259
Joined: Mon May 22, 2006 9:52 pm

clamd keeps dying after cron

Unread post by modom46 »

I have this unofficial-clamav-sigs.sh setup to run via cron every 15 minutes or so I thought but clamd is still stopping and for longer than an hour from the log below.

Is this correct for cron to run unofficial-clamav-sigs.sh every 15 minutes?
15 * * * * /usr/bin/unofficial-clamav-sigs.sh -c /etc/unofficial-clamav-sigs.conf
cron log

Mar 19 05:15:01 godslove crond[20067]: (root) CMD (/usr/bin/unofficial-clamav-sigs.sh -c /etc/unofficial-clamav-sigs.conf)
Mar 19 06:15:01 godslove crond[4275]: (root) CMD (/usr/bin/unofficial-clamav-sigs.sh -c /etc/unofficial-clamav-sigs.conf)
Mar 19 07:15:01 godslove crond[14521]: (root) CMD (/usr/bin/unofficial-clamav-sigs.sh -c /etc/unofficial-clamav-sigs.conf)

messages log

Code: Select all

Mar 19 05:05:52 godslove freshclam[13603]: ClamAV update process started at Thu Mar 19 05:05:52 2009
Mar 19 05:05:56 godslove freshclam[13603]: main.cld is up to date (version: 50, sigs: 500667, f-level: 38, builder: sven)
Mar 19 05:06:09 godslove xinetd[20929]: START: smtp pid=13662 from=95.165.5.181
Mar 19 05:06:13 godslove clamd[26117]: /var/spool/qscan/tmp/godslove.designhosting.biz123745357379113677/orig-godslove.designhosting.biz123$
Mar 19 05:06:14 godslove xinetd[20929]: EXIT: smtp status=0 pid=13662 duration=5(sec)
Mar 19 05:06:26 godslove freshclam[13603]: nonblock_connect: connect timing out (30 secs)
Mar 19 05:06:26 godslove freshclam[13603]: Can't connect to port 80 of host db.us.clamav.net (IP: 208.67.80.27)
Mar 19 05:06:26 godslove freshclam[13603]: Trying host db.us.clamav.net (194.47.250.218)...
Mar 19 05:06:28 godslove xinetd[20929]: START: smtp pid=13750 from=121.159.59.138
Mar 19 05:06:29 godslove clamd[26117]: /var/spool/qscan/tmp/godslove.designhosting.biz123745358979113755/orig-godslove.designhosting.biz123$
Mar 19 05:06:30 godslove freshclam[13603]: Downloading daily-9128.cdiff [100%]
Mar 19 05:06:30 godslove xinetd[20929]: EXIT: smtp status=1 pid=13750 duration=2(sec)
Mar 19 05:06:46 godslove xinetd[20929]: START: smtp pid=13833 from=38.114.110.98
Mar 19 05:06:47 godslove xinetd[20929]: EXIT: smtp status=1 pid=7559 duration=1205(sec)
Mar 19 05:06:49 godslove clamd[26117]: /var/spool/qscan/tmp/godslove.designhosting.biz123745360979113842/orig-godslove.designhosting.biz123$
Mar 19 05:06:50 godslove freshclam[13603]: Downloading daily-9129.cdiff [100%]
Mar 19 05:06:50 godslove xinetd[20929]: EXIT: smtp status=0 pid=13833 duration=4(sec)
Mar 19 05:06:52 godslove freshclam[13603]: Downloading daily-9130.cdiff [100%]
Mar 19 05:06:54 godslove freshclam[13603]: Downloading daily-9131.cdiff [100%]
Mar 19 05:06:55 godslove freshclam[13603]: Downloading daily-9132.cdiff [100%]
Mar 19 05:06:55 godslove freshclam[13603]: Downloading daily-9133.cdiff [100%]
Mar 19 05:06:56 godslove freshclam[13603]: Downloading daily-9134.cdiff [100%]
Mar 19 05:06:57 godslove freshclam[13603]: Downloading daily-9135.cdiff [100%]
Mar 19 05:06:57 godslove freshclam[13603]: daily.cld updated (version: 9135, sigs: 26711, f-level: 38, builder: arnaud)
Mar 19 05:06:57 godslove freshclam[13603]: Database updated (527378 signatures) from db.us.clamav.net (IP: 194.47.250.218)
Mar 19 05:06:57 godslove freshclam[13603]: Clamd successfully notified about the update.
Mar 19 05:07:06 godslove xinetd[20929]: START: smtp pid=13946 from=188.3.178.111
Mar 19 05:07:08 godslove clamd[26117]: Reading databases from /var/clamav
Apparently it stopped aroun 5 am this morning and then I restarted it below.

Code: Select all

Mar 19 08:07:19 godslove clamd[26208]: clamd daemon 0.94.2 (OS: linux-gnu, ARCH: i386, CPU: i386)
Mar 19 08:07:19 godslove clamd[26208]: Running as user qscand (UID 10065, GID 103)
Mar 19 08:07:19 godslove clamd[26208]: Log file size limit disabled.
Mar 19 08:07:19 godslove clamd[26208]: Reading databases from /var/clamav
Mar 19 08:07:19 godslove clamd[26208]: Not loading PUA signatures.
Mar 19 08:07:19 godslove xinetd[20929]: START: smtp pid=26209 from=68.142.236.140
Mar 19 08:07:20 godslove xinetd[20929]: EXIT: smtp status=0 pid=26209 duration=1(sec)
Mar 19 08:07:21 godslove xinetd[20929]: START: smtp pid=26223 from=158.135.3.30 
Mar 19 08:07:21 godslove xinetd[20929]: START: smtp pid=26225 from=200.83.126.138
Mar 19 08:07:21 godslove xinetd[20929]: EXIT: smtp status=0 pid=26223 duration=0(sec)
Mar 19 08:07:24 godslove clamd[26208]: Loaded 1005426 signatures.
Mar 19 08:07:24 godslove clamd[26208]: TCP: Bound to address 127.0.0.1 on port 3310
Mar 19 08:07:24 godslove clamd[26208]: TCP: Setting connection queue length to 30
Mar 19 08:07:24 godslove clamd[26208]: LOCAL: Removing stale socket file /tmp/clamd.socket
Mar 19 08:07:24 godslove clamd[26208]: LOCAL: Unix socket file /tmp/clamd.socket
Mar 19 08:07:24 godslove clamd[26208]: LOCAL: Setting connection queue length to 30
Mar 19 08:07:24 godslove clamd[26237]: Limits: Global size limit set to 104857600 bytes.
Mar 19 08:07:24 godslove clamd[26237]: Limits: File size limit set to 26214400 bytes.
Mar 19 08:07:24 godslove clamd[26237]: Limits: Recursion level limit set to 16.
Mar 19 08:07:24 godslove clamd[26237]: Limits: Files limit set to 10000.
Mar 19 08:07:24 godslove clamd[26237]: Archive support enabled.
Mar 19 08:07:24 godslove clamd[26237]: Algorithmic detection enabled.
Mar 19 08:07:24 godslove clamd[26237]: Portable Executable support enabled.
Mar 19 08:07:24 godslove clamd[26237]: ELF support enabled.
Mar 19 08:07:24 godslove clamd[26237]: Detection of broken executables enabled. 
Mar 19 08:07:24 godslove clamd[26237]: Mail files support enabled.
Mar 19 08:07:24 godslove clamd[26237]: OLE2 support enabled.
Mar 19 08:07:24 godslove clamd[26237]: PDF support enabled.
Mar 19 08:07:24 godslove clamd[26237]: HTML support enabled.
Mar 19 08:07:24 godslove clamd[26237]: Self checking every 1800 seconds.
Mar 19 08:07:24 godslove clamd[26237]: /var/spool/qscan/tmp/godslove.designhosting.biz123746444479126236/orig-godslove.designhosting.biz123746444479126236: Sanesecurity.Junk.395.UNOFFICIAL FOUND
where to look, what to do, etc. to find this problem?

Thanks.
Top
modom46
Forum Regular
Forum Regular
Posts: 259
Joined: Mon May 22, 2006 9:52 pm

Re: clamd keeps dying after cron

Unread post by modom46 »

Hi,

clamd stopped at the same time again this morning.

Can someone please help.

When it stops at 5 am and then I manually restart it this is what the clamd.log says:

Code: Select all

Fri Mar 20 05:06:07 2009 -> Reading databases from /var/clamav
Fri Mar 20 08:36:31 2009 -> +++ Started at Fri Mar 20 08:36:31 2009
Fri Mar 20 08:36:31 2009 -> clamd daemon 0.94.2 (OS: linux-gnu, ARCH: i386, CPU: i386)
Fri Mar 20 08:36:31 2009 -> Running as user qscand (UID 10065, GID 103)
Fri Mar 20 08:36:31 2009 -> Log file size limit disabled.
Fri Mar 20 08:36:31 2009 -> Reading databases from /var/clamav
Fri Mar 20 08:36:31 2009 -> Not loading PUA signatures.
Fri Mar 20 08:36:36 2009 -> Loaded 1005920 signatures.
Fri Mar 20 08:36:36 2009 -> TCP: Bound to address 127.0.0.1 on port 3310
Fri Mar 20 08:36:36 2009 -> TCP: Setting connection queue length to 30
Fri Mar 20 08:36:36 2009 -> LOCAL: Removing stale socket file /tmp/clamd.socket
Fri Mar 20 08:36:36 2009 -> LOCAL: Unix socket file /tmp/clamd.socket
Fri Mar 20 08:36:36 2009 -> LOCAL: Setting connection queue length to 30
Fri Mar 20 08:36:36 2009 -> Limits: Global size limit set to 104857600 bytes.
Fri Mar 20 08:36:36 2009 -> Limits: File size limit set to 26214400 bytes.
Fri Mar 20 08:36:36 2009 -> Limits: Recursion level limit set to 16.
Fri Mar 20 08:36:36 2009 -> Limits: Files limit set to 10000.
Fri Mar 20 08:36:36 2009 -> Archive support enabled.
Fri Mar 20 08:36:36 2009 -> Algorithmic detection enabled.
Fri Mar 20 08:36:36 2009 -> Portable Executable support enabled.
Fri Mar 20 08:36:36 2009 -> ELF support enabled.
Fri Mar 20 08:36:36 2009 -> Detection of broken executables enabled.
Fri Mar 20 08:36:36 2009 -> Mail files support enabled.
Fri Mar 20 08:36:36 2009 -> OLE2 support enabled.
Fri Mar 20 08:36:36 2009 -> PDF support enabled.
Fri Mar 20 08:36:36 2009 -> HTML support enabled.
Fri Mar 20 08:36:36 2009 -> Self checking every 1800 seconds.
Top
scott
Atomicorp Staff - Site Admin
Atomicorp Staff - Site Admin
Posts: 8355
Joined: Wed Dec 31, 1969 8:00 pm
Location: earth
Contact:
Contact scott

Re: clamd keeps dying after cron

Unread post by scott »

That doesnt help Im afraid, its just a normal startup sequence
Top
modom46
Forum Regular
Forum Regular
Posts: 259
Joined: Mon May 22, 2006 9:52 pm

Re: clamd keeps dying after cron

Unread post by modom46 »

I cannot find anything else but I did see that the backup manager starts at 14 and then the clamd cron started at 15 but that shouldn't matter I would think as it's only stopping each morning at 5 am.

However, I did change the clamd cron in Plesk under the root section to start at */20 which is every 20 minutes which it is doing now right after the backup manager.

Mar 20 11:14:01 godslove crond[17884]: (root) CMD (/usr/local/psa/admin/sbin/backupmng >/dev/null 2>&1)
Mar 20 11:20:01 godslove crond[19544]: (root) CMD (/usr/bin/unofficial-clamav-sigs.sh -c /etc/unofficial-clamav-sigs.conf)

Very confusing to me why it only stops at 5 am.
Top
Post Reply

Return to “Anti-Spam Help and Discussion”