Go Back   HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials > Linux Forums > Server Operation

Do you like HowtoForge? Please consider supporting us by becoming a subscriber.
Reply
 
Thread Tools Display Modes
  #1  
Old 7th February 2011, 18:35
mpl mpl is offline
HowtoForge Supporter
 
Join Date: Dec 2010
Posts: 30
Thanks: 4
Thanked 1 Time in 1 Post
Default Clamd dying same time each day.

Good Day All,
For the life of me I cannot figure out why clamav-daemon dies at the same time each day. After a simple "/etc/init.d/clamav-daemon start" we are good to go for another day. I think I have narrowed this down to some cron job but which one? Seems like the server.sh script is running at this time each day. Help please?

Debian 10 Perfect Server ispconfig 3

Feb 6 06:28:27 webserver amavis[2134]: (02134-03) (!!)ClamAV-clamd av-scanner FAILED: run_av error: Too many retries to talk to /var/run/clamav/clamd.ctl (Can't connect to UNIX socket /var/run/clamav/clamd.ctl: Connection refused) at (eval 88) line 309.

Feb 7 06:28:15 webserver amavis[2133]: (02133-06) (!!)ClamAV-clamd av-scanner FAILED: run_av error: Too many retries to talk to /var/run/clamav/clamd.ctl (Can't connect to UNIX socket /var/run/clamav/clamd.ctl: Connection refused) at (eval 88) line 309.

Best Regards,
Mike
Reply With Quote
Sponsored Links
  #2  
Old 8th February 2011, 20:12
falko falko is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 41,711
Thanks: 1,899
Thanked 2,702 Times in 2,545 Posts
Default

I guess it is some cron job in /etc/cron.daily/.
__________________
Falko
--
Download the ISPConfig 3 Manual! | Check out the ISPConfig 3 Billing Module!

FB: http://www.facebook.com/howtoforge

nginx-Webhosting: Timme Hosting | Follow me on:
Reply With Quote
  #3  
Old 9th February 2011, 03:30
mpl mpl is offline
HowtoForge Supporter
 
Join Date: Dec 2010
Posts: 30
Thanks: 4
Thanked 1 Time in 1 Post
Default

Quote:
Originally Posted by falko View Post
I guess it is some cron job in /etc/cron.daily/.
Hello Falco ;-)
Yep, that's what I am thinking...
Here is something that just started today. I guess I need to figure this out before I can see where clamav is failing. Any ideas? Is it possible to step through the php script to figure out where this message is coming from?
1st.
webserver:/etc/cron.daily# crontab -l
* * * * * /usr/local/ispconfig/server/server.sh > /dev/null 2>> /var/log/ispconfig/cron.log
30 00 * * * /usr/local/ispconfig/server/cron_daily.sh > /dev/null 2>> /var/log/ispconfig/cron.log
webserver:/etc/cron.daily# /usr/local/ispconfig/server/server.sh
2nd.
webserver:/etc/cron.daily# /usr/local/ispconfig/server/server.sh
finished.
3rd.
webserver:/etc/cron.daily# /usr/local/ispconfig/server/cron_daily.sh
Warning: Truncating oversized referrer field
Warning: Truncating oversized referrer field
Warning: Truncating oversized referrer field
Warning: Truncating oversized referrer field
Warning: Truncating oversized referrer field
//////////////////////////////////////////////////////////////
So I check cron_daily.sh
webserver:/home/www# cat /usr/local/ispconfig/server/cron_daily.sh
#!/bin/sh

PATH=/sbin:/usr/sbin:/bin:/usr/bin:/usr/local/sbin:/usr/local/bin:/usr/X11R6/bin

/usr/bin/php -q /usr/local/ispconfig/server/cron_daily.php
Reply With Quote
  #4  
Old 9th February 2011, 17:15
falko falko is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 41,711
Thanks: 1,899
Thanked 2,702 Times in 2,545 Posts
Default

Can you post the output of
Code:
ls -la /etc/cron.daily/
?
__________________
Falko
--
Download the ISPConfig 3 Manual! | Check out the ISPConfig 3 Billing Module!

FB: http://www.facebook.com/howtoforge

nginx-Webhosting: Timme Hosting | Follow me on:
Reply With Quote
  #5  
Old 10th February 2011, 04:17
mpl mpl is offline
HowtoForge Supporter
 
Join Date: Dec 2010
Posts: 30
Thanks: 4
Thanked 1 Time in 1 Post
Default

Here you go! Thanks so much Falco ;-)

webserver:/etc/postfix# ls -la /etc/cron.daily/
total 84
drwxr-xr-x 2 root root 4096 2011-01-22 13:26 .
drwxr-xr-x 105 root root 4096 2011-02-09 16:18 ..
-rwxr-xr-x 1 root root 199 2008-07-26 03:29 amavisd-new
-rwxr-xr-x 1 root root 633 2010-12-11 13:59 apache2
-rwxr-xr-x 1 root root 7482 2010-05-12 16:25 apt
-rwxr-xr-x 1 root root 314 2008-12-04 21:51 aptitude
-rwxr-xr-x 1 root root 77 2008-09-16 04:28 apt-show-versions
-rwxr-xr-x 1 root root 502 2007-11-20 02:35 bsdmainutils
-rwxr-xr-x 1 root root 4073 2010-12-10 09:01 exim4-base
-rwxr-xr-x 1 root root 89 2008-10-08 11:34 logrotate
-rwxr-xr-x 1 root root 954 2009-01-24 07:31 man-db
-rwxr-xr-x 1 root root 438 2008-10-28 06:18 mlocate
-rwxr-xr-x 1 root root 1154 2009-11-22 12:35 ntp
-rw-r--r-- 1 root root 102 2008-09-28 05:33 .placeholder
-rwxr-xr-x 1 root root 345 2008-09-29 04:52 quota
-rwxr-xr-x 1 root root 651 2008-08-25 13:03 rkhunter
-rwxr-xr-x 1 root root 1142 2010-01-01 13:58 spamassassin
-rwxr-xr-x 1 root root 330 2010-08-11 11:12 squirrelmail
-rwxr-xr-x 1 root root 3349 2008-09-28 05:33 standard
-rwxr-xr-x 1 root root 1450 2008-10-27 16:02 webalizer
Reply With Quote
  #6  
Old 10th February 2011, 20:06
falko falko is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 41,711
Thanks: 1,899
Thanked 2,702 Times in 2,545 Posts
Default

That looks ok. What's the output of
Code:
crontab -l
?

BTW, you could set up monit and make it restart clamd whenever it is not running.
__________________
Falko
--
Download the ISPConfig 3 Manual! | Check out the ISPConfig 3 Billing Module!

FB: http://www.facebook.com/howtoforge

nginx-Webhosting: Timme Hosting | Follow me on:
Reply With Quote
The Following User Says Thank You to falko For This Useful Post:
mpl (11th February 2011)
Reply

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
Hacked server Captain Installation/Configuration 8 23rd December 2010 10:39
CPU load locks up box. Apache or MYSQL related. crypted General 61 29th October 2010 22:16
rkhunter report Captain Installation/Configuration 6 10th October 2010 13:05
adding mail boxes kwickcut Server Operation 20 11th August 2010 01:02
Clamd terminating too quickly? BorderAmigos Installation/Configuration 2 5th April 2010 15:33


All times are GMT +2. The time now is 14:00.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.