Koozali.org: home of the SME Server

email clamav check log location

Offline Stefano

  • *
  • 10,836
  • +2/-0
email clamav check log location
« on: June 14, 2022, 05:26:06 PM »
Hi all

on my SME 10 server fully updated, I see, in qpsmtpd's logs:

Code: [Select]

@4000000062a87f48218eb89c 48531 (data_post) virus::clamdscan: pass, clean


for a message with a infected, password protected zip file.

I tried to check clam* logs, but I didn't find anything more than clamd ones, which don't have any useful info.

Which is the log where I can dig a little  more?

TIA

Offline Jean-Philippe Pialasse

  • *
  • 2,747
  • +11/-0
  • aka Unnilennium
    • http://smeserver.pialasse.com
Re: email clamav check log location
« Reply #1 on: June 14, 2022, 07:25:51 PM »
by up to date do you include smeupdates-testing or not?

if not try

journalctl -u clamd


Offline Stefano

  • *
  • 10,836
  • +2/-0
Re: email clamav check log location
« Reply #2 on: June 15, 2022, 09:27:41 AM »
Hi JPP.

applying last updates right now, in any case with journalclt I see:
Code: [Select]
Jun 15 09:21:50 sme9.mind-at-work.it systemd[1]: Stopped clamd scanner () daemon.
Jun 15 09:21:50 sme9.mind-at-work.it systemd[1]: Starting clamd scanner () daemon...
Jun 15 09:22:09 sme9.mind-at-work.it clamd[21971]: LibClamAV Warning: Detected duplicate databases /var/lib/clamav/main.cvd and /var/lib/clamav/main.cld, please manually remove one of them
Jun 15 09:22:14 sme9.mind-at-work.it systemd[1]: Started clamd scanner () daemon.

and nothing more (meaning no scan related lines/messages)