Topic: ERROR: clamd.sock is in use by another process

[LarsKjeldsen]

Hi.

It all started with that I noticed my Harddrive was busy all the time, and the server answer time was up to 4 - 5 minutes.

I then updated ClamAV via http://sme.swerts-knudsen.dk/

After I rebooted, the server was okay fore a while and then again the harddrive was running crazy again.

When I run TOP the CPU was not over 10 % on both CPU's so ??

It help to stop the clamd.

My logfile tells me that:

--- Start LOG --
Sat Jan 29 21:52:46 2005 -> +++ Started at Sat Jan 29 21:52:46 2005
Sat Jan 29 21:52:46 2005 -> clamd daemon 0.81 (OS: linux-gnu, ARCH: i386, CPU: i686)
Sat Jan 29 21:52:46 2005 -> Log file size limited to 1048576 bytes.
Sat Jan 29 21:52:46 2005 -> Running as user qmailq (UID 404, GID 401)
Sat Jan 29 21:52:46 2005 -> Reading databases from /usr/share/clamav
Sat Jan 29 21:52:48 2005 -> Protecting against 29890 viruses.
Sat Jan 29 21:52:48 2005 -> Unix socket file /var/lib/clamav/clamd.sock
Sat Jan 29 21:52:48 2005 -> Setting connection queue length to 15
Sat Jan 29 21:52:48 2005 -> Archive: Archived file size limit set to 10485760 bytes.
Sat Jan 29 21:52:48 2005 -> Archive: Recursion level limit set to 5.
Sat Jan 29 21:52:48 2005 -> Archive: Files limit set to 1000.
Sat Jan 29 21:52:48 2005 -> WARNING: Archive: Compression ratio limit disabled.
Sat Jan 29 21:52:48 2005 -> Archive support enabled.
Sat Jan 29 21:52:48 2005 -> Archive: RAR support disabled.
Sat Jan 29 21:52:48 2005 -> Portable Executable support enabled.
Sat Jan 29 21:52:48 2005 -> Mail files support enabled.
Sat Jan 29 21:52:48 2005 -> OLE2 support enabled.
Sat Jan 29 21:52:48 2005 -> HTML support enabled.
Sat Jan 29 21:52:48 2005 -> Self checking every 1800 seconds.
Sat Jan 29 22:00:23 2005 -> /var/spool/amavis-ng/amavis-unpack-41fbf961-098e/parts/00000000: Eicar-Test-Signature FOUND
Sat Jan 29 22:06:33 2005 -> +++ Started at Sat Jan 29 22:06:33 2005
Sat Jan 29 22:06:34 2005 -> clamd daemon 0.81 (OS: linux-gnu, ARCH: i386, CPU: i686)
Sat Jan 29 22:06:34 2005 -> Log file size limited to 1048576 bytes.
Sat Jan 29 22:06:34 2005 -> Running as user qmailq (UID 404, GID 401)
Sat Jan 29 22:06:34 2005 -> Reading databases from /usr/share/clamav
Sat Jan 29 22:06:50 2005 -> Protecting against 29890 viruses.
Sat Jan 29 22:06:50 2005 -> ERROR: Socket file /var/lib/clamav/clamd.sock is in use by another process.
Sat Jan 29 22:27:09 2005 -> +++ Started at Sat Jan 29 22:27:09 2005
Sat Jan 29 22:27:09 2005 -> clamd daemon 0.81 (OS: linux-gnu, ARCH: i386, CPU: i686)
Sat Jan 29 22:27:09 2005 -> Log file size limited to 1048576 bytes.
Sat Jan 29 22:27:09 2005 -> Running as user qmailq (UID 404, GID 401)
Sat Jan 29 22:27:09 2005 -> Reading databases from /usr/share/clamav
Sat Jan 29 22:27:10 2005 -> Protecting against 29890 viruses.
Sat Jan 29 22:27:11 2005 -> ERROR: Socket file /var/lib/clamav/clamd.sock is in use by another process.
Sat Jan 29 22:27:11 2005 -> No stats for Database check - forcing reload
Sat Jan 29 22:27:16 2005 -> Reading databases from /usr/share/clamav
Sat Jan 29 22:27:18 2005 -> Database correctly reloaded (29890 viruses)
Sat Jan 29 22:28:36 2005 -> /var/spool/amavis-ng/amavis-unpack-41fc0003-0c16/parts/00000000: Eicar-Test-Signature FOUND
--- END OF LOG ---

Hope anyone can help me.

Best regards

Lars Kjeldsen

[smeghead]

.. search is your friend; look for clamd.sock and you will find an answer to your issue ..

[LarsKjeldsen]

Hi, smeghead / anyone.

I can't see anything I dit not try, so search was not my friend this time, sorry.
I allways use search before I post.  

So anyone there can help me..

Lars Kjeldsen

[smeghead]

.. read the search results page and you will find an option to display all results from the forums, eg:

http://forums.contribs.org/index.php?action=search2&search=clamd.sock&mid=24&action=showall&andor=AND