From clamav-users-bounces@lists.clamav.net  Wed Apr 11 20:25:06 2007
Return-Path: <clamav-users-bounces@lists.clamav.net>
X-Original-To: list@tad.clamav.net
Delivered-To: list@tad.clamav.net
X-Virus-Scanned: Debian amavisd-new at tad.clamav.net
Received: from tad.clamav.net ([127.0.0.1])
	by localhost (tad.clamav.net [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id MInPNacniVSb; Wed, 11 Apr 2007 20:25:06 +0200 (CEST)
Received: from tad.clamav.net (localhost.localdomain [127.0.0.1])
	by tad.clamav.net (Postfix) with ESMTP id ACFB2354061;
	Wed, 11 Apr 2007 20:24:54 +0200 (CEST)
X-Original-To: clamav-users@tad.clamav.net
Delivered-To: clamav-users@tad.clamav.net
X-Virus-Scanned: Debian amavisd-new at tad.clamav.net
Received: from tad.clamav.net ([127.0.0.1])
	by localhost (tad.clamav.net [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id d6jNCAZ9YMMD for <clamav-users@tad.clamav.net>;
	Wed, 11 Apr 2007 20:24:51 +0200 (CEST)
Received: from elih.org (mail.elih.org [69.27.243.222])
	by tad.clamav.net (Postfix) with SMTP id 8D1E035405E
	for <clamav-users@lists.clamav.net>;
	Wed, 11 Apr 2007 20:24:51 +0200 (CEST)
Received: (qmail 32517 invoked by uid 513); 11 Apr 2007 18:24:51 -0000
Received: from 167.206.159.34 by external.elih.org (envelope-from
	<jmaul@elih.org>, uid 504) with qmail-scanner-1.24 
	(clamdscan: 0.88.4/2413. spamassassin: 2.64.  
	Clear:RC:1(167.206.159.34):. 
	Processed in 0.040521 secs); 11 Apr 2007 18:24:51 -0000
Received: from unknown (HELO ?192.168.128.2?) (167.206.159.34)
	by elih.org with SMTP; 11 Apr 2007 18:24:50 -0000
Message-ID: <461D27F4.7050505@elih.org>
Date: Wed, 11 Apr 2007 14:24:52 -0400
From: Jim Maul <jmaul@elih.org>
Organization: Eastern Long Island Hospital
User-Agent: Thunderbird 1.5.0.2 (Windows/20060308)
MIME-Version: 1.0
To: ClamAV users ML <clamav-users@lists.clamav.net>
References: <461CBC94.3040607@gmx.net> <20070411174141.GA5757@adsl.nervous.it>
	<AA5E7C27A11E684EA8238D6CB21DC7F3021E55@AE-MAIL.aenetad.net>
In-Reply-To: <AA5E7C27A11E684EA8238D6CB21DC7F3021E55@AE-MAIL.aenetad.net>
Subject: Re: [Clamav-users] error stops clamd
X-BeenThere: clamav-users@lists.clamav.net
X-Mailman-Version: 2.1.9
Precedence: list
Reply-To: ClamAV users ML <clamav-users@lists.clamav.net>
List-Id: ClamAV users ML <clamav-users.lists.clamav.net>
List-Unsubscribe: <http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users>,
	<mailto:clamav-users-request@lists.clamav.net?subject=unsubscribe>
List-Post: <mailto:clamav-users@lists.clamav.net>
List-Help: <mailto:clamav-users-request@lists.clamav.net?subject=help>
List-Subscribe: <http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users>,
	<mailto:clamav-users-request@lists.clamav.net?subject=subscribe>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Sender: clamav-users-bounces@lists.clamav.net
Errors-To: clamav-users-bounces@lists.clamav.net

McDonald, Dan wrote:
>> From: clamav-users-bounces@lists.clamav.net on behalf of Luca Gibelli
>> Hello jacusy,
> 
>>> this night my clamd-process terminated with an error. The reason was
>>> that freshclam took too long to do its update, so that clamd could not
>>> lock the database. So clamd exited. But this behaviour is very fatal
>>> because the mail system (postfix with amavis) relys on clamd, so if it
>>> is down, the whole mail traffic is blocked!! Caused of an error while
>>> updating......
>> amavisd-new falls back to clamscan by default, if clamd is not available.
> 
> Right, but my system is sized for operation with clamd.  When clamd stops, the memory utilization goes through the roof and the machine basically stops because it is spending 80-90% of the cpu time in IOWAIT, trying to swap out enough ram to load the whole clamav database for every message...
> And mail backs up... At least it doesn't drop any mail.
> 

And none of this discusses the real issue that clamd should not have 
been unavailable in the first place.  I understand that daemons fail and 
  critical ones should have monitoring in place.  This is a no brainer.

However, it is illogical that clamd would die completely due to issues 
with a recently downloaded definition file.  Why can it not just roll 
back to the old, previously working, definitions?  Can someone please 
explain this?  Im having trouble trying to comprehend the current behavior.
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html

