LinuxQuestions.org
Download your favorite Linux distribution at LQ ISO.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Software
User Name
Password
Linux - Software This forum is for Software issues.
Having a problem installing a new program? Want to know which application is best for the job? Post your question in this forum.

Notices


Reply
  Search this Thread
Old 09-08-2009, 01:20 PM   #1
alitabas
LQ Newbie
 
Registered: Aug 2009
Posts: 26

Rep: Reputation: 15
clamav error


hi all,
I'm a problem with clamav, I'm work with p3scan and clamav, apparently p3scan to work, but when a mail is infected it stops and show it:




12:01:29 p3scan[7849]: Informing email client to wait...
12:01:29 p3scan[7849]: notified=1
12:01:29 p3scan[7849]: got '.\r\n', mail is complete.
12:01:29 p3scan[7849]: Invoking scanner
12:01:29 p3scan[7849]: Basic scanner says hello
12:01:29 p3scan[7849]: popen /usr/bin/clamscan --no-sumary '/var/spool/p3scan/children/7849/p3scan.WgbVwb' 2>&1
12:01:29 p3scan[7849]: vi : ''
12:01:29 p3scan[7849]: Scanner returned signal 40
12:01:29 p3scan[7849]: WARNING: Your scanner returned neither 0, a viruscode, nor a good viruscode, but 40
12:01:29 p3scan[7849]: Scanner returned -1
12:01:29 p3scan[7849]: ERR: We can't say if it is a virus! So we have to give the client the mail! You should check your configuration/system
12:01:29 p3scan[7849]: ERR: Scanner returned unexpected error code. You should check your configuration/system.
12:01:29 p3scan[7849]: ERR: Exiting now...

ERR: Scanner returned unexpected error code. You should check your configuration/system.
12:01:29 p3scan[7849]: echo 'Scanner returned unexpected error code. You should check your configuration/system.' | /bin/mail -s 'P3Scan Terminating!' alicia@linux.pruebas.net
do_sigterm_proxy2, signal 1
ERR: We cot SIGTERM!
Uninit context
12:01:29 p3scan[7849]: ERR: Unable to free memory not previously allocated: ��Z p!�
12:01:29 p3scan[7846]: ERR: Attention: child with pid 7849 died with abnormal termsignal (11)! This is probably a bug. Please report to the author. numprocs is now 0
12:01:29 p3scan[7846]: Erasing /var/spool/p3scan/children/7849/ contents
12:01:29 p3scan[7846]: Unlinking (/var/spool/p3scan/children/7849/p3shdr.IncGTc)
12:01:29 p3scan[7846]: Unlinking (/var/spool/p3scan/children/7849/p3scan.WgbVwb)
12:01:29 p3scan[7846]: Removing directory /var/spool/p3scan/children/7849/

Can someone help me? please!!

thank's
 
Old 09-08-2009, 02:51 PM   #2
TB0ne
LQ Guru
 
Registered: Jul 2003
Location: Birmingham, Alabama
Distribution: SuSE, RedHat, Slack,CentOS
Posts: 22,306

Rep: Reputation: 6005Reputation: 6005Reputation: 6005Reputation: 6005Reputation: 6005Reputation: 6005Reputation: 6005Reputation: 6005Reputation: 6005Reputation: 6005Reputation: 6005
Quote:
Originally Posted by alitabas View Post
hi all,
I'm a problem with clamav, I'm work with p3scan and clamav, apparently p3scan to work, but when a mail is infected it stops and show it:

12:01:29 p3scan[7849]: ERR: Scanner returned unexpected error code. You should check your configuration/system.
12:01:29 p3scan[7849]: ERR: Exiting now...

ERR: Scanner returned unexpected error code. You should check your configuration/system.
12:01:29 p3scan[7849]: echo 'Scanner returned unexpected error code. You should check your configuration/system.' | /bin/mail -s 'P3Scan Terminating!' alicia@linux.pruebas.net

Can someone help me? please!!

thank's
Well, your error suggests you check your configuration. Did you??? And you need to post some useful information, before you can get help...like version/distro of Linux, and the config file(s) in question.
 
Old 09-08-2009, 03:40 PM   #3
alitabas
LQ Newbie
 
Registered: Aug 2009
Posts: 26

Original Poster
Rep: Reputation: 15
sorry,
Linux CentOS 5.3 with
p3scan 2.3.2
clamav 0.95.2
the user is root,need to work as a root user

p3scan configuration:
p3scan.conf

pidfile = /var/run/p3scan/p3scan.pid
maxchilds = 10
port = 8110
emailport = 25
user = root
notifydir = /var/spool/p3scan/notify
virusdir = /var/spool/p3scan
emergcon =alicia@linux.pruebas.net
scannertype = basic
scanner = /usr/bin/clamdscan --no-sumary
virusregexp = .*: (.*) FOUND
debug
template = /etc/p3scan/p3scan.mail
subject =[¡¡¡VIRUS!!!]

clamd.conf

LogFileUnlock yes
LogFile /var/log/clamav/clamd.log
LogFileMaxSize 1M
LogTime yes
LogSyslog yes
LogFacility LOG_MAIL
LogVerbose yes
PidFile /var/run/clamav/clamd.pid
TemporaryDirectory /tmp
DatabaseDirectory /var/clamav
LocalSocket /var/run/clamav/clamd.sock
FixStaleSocket yes
TCPSocket 3310
TCPAddr 0.0.0.0
MaxConnectionQueueLength 30
StreamMaxLength 10M
MaxThreads 50
ReadTimeout 300
CommandReadTimeout 5
MaxQueue 200
MaxDirectoryRecursion 20
FollowDirectorySymlinks yes
User root
Debug yes
DetectPUA yes
IncludePUA Scanner
AlgorithmicDetection yes
ScanPE yes
ScanELF yes
DetectBrokenExecutables yes
ScanMail yes

this is my configuration, p3scan is run now, but when read a mail infected it stopped.
 
Old 09-08-2009, 04:53 PM   #4
alitabas
LQ Newbie
 
Registered: Aug 2009
Posts: 26

Original Poster
Rep: Reputation: 15
Now this is the error show:
13:49:00 p3scan[8450]: Invoking scanner
13:49:00 p3scan[8450]: Basic scanner says hello
13:49:00 p3scan[8450]: popen /usr/bin/clamdscan --no-sumary '/var/spool/p3scan/children/8450/p3scan.A2gVwb' 2>&1
13:49:00 p3scan[8450]: vi : ''
13:49:00 p3scan[8450]: Scanner returned signal 2
13:49:00 p3scan[8450]: WARNING: Your scanner returned neither 0, a viruscode, nor a good viruscode, but 2
13:49:00 p3scan[8450]: Scanner returned -1
13:49:00 p3scan[8450]: ERR: We can't say if it is a virus! So we have to give the client the mail! You should check your configuration/system
13:49:00 p3scan[8450]: ERR: Scanner returned unexpected error code. You should check your configuration/system.
13:49:00 p3scan[8450]: ERR: Exiting now...

ERR: Scanner returned unexpected error code. You should check your configuration/system.
13:49:00 p3scan[8450]: echo 'Scanner returned unexpected error code. You should check your configuration/system.' | /bin/mail -s 'P3Scan Terminating!' alicia@linux.pruebas.net
do_sigterm_proxy2, signal 1
ERR: We cot SIGTERM!
Uninit context
13:49:00 p3scan[8450]: ERR: Unable to free memory not previously allocated: �p� p!�
13:49:00 p3scan[8448]: ERR: Attention: child with pid 8450 died with abnormal termsignal (11)! This is probably a bug. Please report to the author. numprocs is now 0
13:49:00 p3scan[8448]: Erasing /var/spool/p3scan/children/8450/ contents
13:49:00 p3scan[8448]: Unlinking (/var/spool/p3scan/children/8450/p3shdr.0UnGTc)
13:49:00 p3scan[8448]: Unlinking (/var/spool/p3scan/children/8450/p3scan.A2gVwb)
13:49:00 p3scan[8448]: Removing directory /var/spool/p3scan/children/8450/

can someone know why return me the 2 number????
 
Old 09-08-2009, 11:30 PM   #5
TB0ne
LQ Guru
 
Registered: Jul 2003
Location: Birmingham, Alabama
Distribution: SuSE, RedHat, Slack,CentOS
Posts: 22,306

Rep: Reputation: 6005Reputation: 6005Reputation: 6005Reputation: 6005Reputation: 6005Reputation: 6005Reputation: 6005Reputation: 6005Reputation: 6005Reputation: 6005Reputation: 6005
Quote:
Originally Posted by alitabas View Post
notifydir = /var/spool/p3scan/notify
virusdir = /var/spool/p3scan
Those lines bear checking. Do those directories exist? Permissions correct? This thread:

http://www.mail-archive.com/debian-b...msg180388.html

May help. Running as root may also be a problem....
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
clamav error alitabas Linux - Software 9 08-18-2009 05:38 PM
clamav installation error slackraz Linux - Newbie 4 04-03-2008 06:46 PM
ClamAv error. Help! Wilson_Lee Linux - Newbie 5 09-10-2007 02:23 AM
ClamAV ERROR darkranger Linux - Security 2 02-27-2005 09:32 AM
Error installing Clamav? hacinn Linux - Security 1 07-01-2004 05:03 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Software

All times are GMT -5. The time now is 09:07 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration