the problem about clamav-new and amavis

[wonhow]

hi everybody,
I am in my server equipped with my own mail server, but I encountered a strange problem, clamav always liked the problem, I obviously configured the mail server, but also a good adjustment, but for a period of time After about 10 days will be the following error：
(!) /usr/bin/clamscan is taking longer than 315 s and will be killed
May 12 10:41:24 mail amavis[26661]: (26661-04) (!) killing process [26887] running /usr/bin/clamscan
May 12 10:41:24 mail amavis[26661]: (26661-04) (!) run_av: timed out
May 12 10:41:24 mail amavis[26661]: (26661-04) (!!) ClamAV-clamscan av-scanner FAILED: /usr/bin/clamscan timed out at (eval 44) line 462.
May 12 10:41:24 mail amavis[26661]: (26661-04) (!!) TROUBLE in check_mail: virus_scan FAILED: virus_scan: ALL VIRUS SCANNERS FAILED: ClamAV-clamd av-scanner FAILED: Too many retries to talk to /var/run/clamav/clamd.ctl (Can't connect to UNIX socket /var/run/clamav/clamd.ctl: No such file or directory) at (eval 44) line 268.; ClamAV-clamscan av-scanner FAILED: /usr/bin/clamscan timed out at (eval 44) line 462.
May 12 10:41:24 mail amavis[26661]: (26661-04) (!) PRESERVING EVIDENCE in /var/lib/amavis/tmp/amavis-20080512T103602-26661
May 12 10:41:24 mail postfix/smtp[24195]: 7B896E3C43: to=<root@mail.hattrick.org.cn>, orig_to=<root>, relay=127.0.0.1[127.0.0.1]:10024, delay=176782, delays=63077/113383/0/322, dsn=4.5.0, status=deferred (host 127.0.0.1[127.0.0.1] said: 451 4.5.0 Error in processing, id=26661-04, virus_scan FAILED: virus_scan: ALL VIRUS SCANNERS FAILED: ClamAV-clamd av-scanner FAILED: Too many retries to talk to /var/run/clamav/clamd.ctl (Can't connect to UNIX socket /var/run/clamav/clamd.ctl: No such file or directory) at (eval 44) line 268.; ClamAV-clamscan av-scanner FAILED: /usr/bin/clamscan timed out at (eval 44) line 462. (in reply to end of DATA command))
May 12 10:41:25 mail amavis[26661]: (26661-05) (!) ClamAV-clamd: Can't connect to UNIX socket /var/run/clamav/clamd.ctl: No such file or directory, retrying (2)
May 12 10:41:31 mail amavis[26661]: (26661-05) (!!) ClamAV-clamd av-scanner FAILED: Too many retries to talk to /var/run/clamav/clamd.ctl (Can't connect to UNIX socket /var/run/clamav/clamd.ctl: No such file or directory) at (eval 44) line 268.
May 12 10:41:31 mail amavis[26661]: (26661-05) (!!) WARN: all primary virus scanners failed, considering backups
May 12 10:41:32 mail amavis[26353]: (26353-08) (!) /usr/bin/clamscan is taking longer than 315 s and will be killed
May 12 10:41:32 mail amavis[26353]: (26353-08) (!) killing process [26889] running /usr/bin/clamscan
May 12 10:41:32 mail amavis[26353]: (26353-08) (!) run_av: timed out
May 12 10:41:32 mail amavis[26353]: (26353-08) (!!) ClamAV-clamscan av-scanner FAILED: /usr/bin/clamscan timed out at (eval 44) line 462.
May 12 10:41:32 mail amavis[26353]: (26353-08) (!!) TROUBLE in check_mail: virus_scan FAILED: virus_scan: ALL VIRUS SCANNERS FAILED: ClamAV-clamd av-scanner FAILED: Too many retries to talk to /var/run/clamav/clamd.ctl (Can't connect to UNIX socket /var/run/clamav/clamd.ctl: No such file or directory) at (eval 44) line 268.; ClamAV-clamscan av-scanner FAILED: /usr/bin/clamscan timed out at (eval 44) line 462.
May 12 10:41:32 mail amavis[26353]: (26353-08) (!) PRESERVING EVIDENCE in /var/lib/amavis/tmp/amavis-20080512T103610-26353
May 12 10:41:32 mail postfix/smtp[24197]: 96B1FE3BC7: to=<root@mail.hattrick.org.cn>, orig_to=<root>, relay=127.0.0.1[127.0.0.1]:10024, delay=177090, delays=63377/113391/0/322, dsn=4.5.0, status=deferred (host 127.0.0.1[127.0.0.1] said: 451 4.5.0 Error in processing, id=26353-08, virus_scan FAILED: virus_scan: ALL VIRUS SCANNERS FAILED: ClamAV-clamd av-scanner FAILED: Too many retries to talk to /var/run/clamav/clamd.ctl (Can't connect to UNIX socket /var/run/clamav/clamd.ctl: No such file or directory) at (eval 44) line 268.; ClamAV-clamscan av-scanner FAILED: /usr/bin/clamscan timed out at (eval 44) line 462. (in reply to end of DATA command))

My OS is debian etch ，who can help me？

[falko]

I suggest you set up monit ( http://www.howtoforge.com/server_mon...it_debian_etch ) and set up a ruleset for ClamAV with this line in it:

if failed unixsocket /var/run/clamav/clamd.ctl then restart

You can find more examples here: http://www.tildeslash.com/monit/doc/examples.php

[wonhow]

thanks falko, i did a upgrade and then the problem was gone . i want to know the logic of the whole mail system ,how dose each part work together somebody who can draw a picture that shows the frame .thanks very much , i am a chinese i am not good at english excuse me