Mailing List Archive: ClamAV: users

clamd unexpected termination: "... Failure in bytecode testmode"

Index | Next | Previous | View Threaded

M.Slowe at kent

Oct 24, 2011, 3:13 AM

Post #1 of 17 (1022 views)
Permalink

clamd unexpected termination: "... Failure in bytecode testmode"

Hi,

I'm seeing a problem on a bunch of Solaris 10 SPARC servers running 0.97.x since about 00:55 BST this morning. Our 0.96 hosts seem to be ok (and I've downgraded the important 0.97 ones so that clamd can run...).

The following error occurs $SELF_CHECK_INTERVAL (600s) after clamd start:

Mon Oct 24 10:27:30 2011 -> No stats for Database check - forcing reload
Mon Oct 24 10:27:34 2011 -> Reading databases from /var/clamav
Mon Oct 24 10:28:37 2011 -> ERROR: Database initialization error: can't compile engine: Failure in bytecode testmode
Mon Oct 24 10:28:40 2011 -> Terminating because of a fatal error.
Mon Oct 24 10:28:40 2011 -> Waiting for all threads to finish
Mon Oct 24 10:28:40 2011 -> Shutting down the main socket.
Mon Oct 24 10:28:40 2011 -> Pid file removed.
Mon Oct 24 10:28:40 2011 -> --- Stopped at Mon Oct 24 10:28:40 2011
Mon Oct 24 10:28:40 2011 -> Closing the main socket.
Mon Oct 24 10:28:40 2011 -> Socket file removed.

I have tried:

* blowing away the definitions and re-downloading via fresh clam
* upgrading from 0.97.1 to 0.97.3 (again with brand new definitions)

Downgrading to 0.96 has made the problem go away but is obviously not ideal...

A colleague noticed this post from Friday:

http://lurker.clamav.net/thread/20111023.183536.ad0fdad6.en.html

... which appears possibly related -- also Solaris, also failing during self-check but their's was failing within freshclam and fixed itself when "daily.cld was updated to 13840" -- we're on 13843 :(

Thanks for any advice!

Information that may be useful:

$ clamconf -n
Checking configuration files in /usr/local/etc

Config file: clamd.conf
-----------------------
LogFileMaxSize = "268435456"
LogTime = "yes"
LogVerbose = "yes"
PidFile = "/var/run/clamd.pid"
TemporaryDirectory = "/var/tmp"
LocalSocket = "/tmp/clamd.socket"

Config file: freshclam.conf
---------------------------
PidFile = "/var/run/freshclam.pid"
DatabaseMirror = "database.clamav.net"
HTTPProxyServer = "advocate.kent.ac.uk"
HTTPProxyPort = "3128"

clamav-milter.conf not found

Software settings
-----------------
Version: 0.97.3
Optional features supported: MEMPOOL IPv6 AUTOIT_EA06

Database information
--------------------
Database directory: /var/clamav
daily.cld: version 13843, sigs: 15910, built on Mon Oct 24 04:10:43 2011
main.cld: version 54, sigs: 1044387, built on Tue Oct 11 15:34:20 2011
bytecode.cld: version 149, sigs: 39, built on Sun Oct 23 09:29:41 2011
Total number of signatures: 1060336

Platform information
--------------------
uname: solaris2.10
OS: solaris2.10, ARCH: sparc, CPU: sparc
Full OS version: Solaris 10 10/09 s10s_u8wos_08a SPARC
zlib version: 1.2.3 (1.2.3), compile flags: 55
platform id: 0x0e663f3f1400000000000590

Build information
-----------------
Sun studio: (0.5.144)
CPPFLAGS: -I/usr/local/include
CFLAGS: -g
CXXFLAGS:
LDFLAGS: -L/usr/local/lib -R/usr/local/lib
Configure: '--with-pic' '--disable-rpath' '--prefix=/usr/local' '--disable-clamav' '--disable-bzip2' '--datadir=/var/clamav' '--with-dbdir=/var/clamav' '--disable-unrar' 'CC=cc' 'LDFLAGS=-L/usr/local/lib -R/usr/local/lib' --enable-ltdl-convenience
sizeof(void*) = 4
Engine flevel: 63, dconf: 63

Mon Oct 24 10:04:10 2011 -> +++ Started at Mon Oct 24 10:04:10 2011
Mon Oct 24 10:04:10 2011 -> clamd daemon 0.97.1 (OS: solaris2.10, ARCH: sparc, CPU: sparc)
Mon Oct 24 10:04:10 2011 -> Log file size limited to 268435456 bytes.
Mon Oct 24 10:04:10 2011 -> Reading databases from /var/clamav
Mon Oct 24 10:04:10 2011 -> Not loading PUA signatures.
Mon Oct 24 10:04:10 2011 -> Bytecode: Security mode set to "TrustSigned".
Mon Oct 24 10:05:07 2011 -> Loaded 1059084 signatures.
Mon Oct 24 10:05:13 2011 -> LOCAL: Unix socket file /tmp/clamd.socket
Mon Oct 24 10:05:13 2011 -> LOCAL: Setting connection queue length to 200
Mon Oct 24 10:05:13 2011 -> Limits: Global size limit set to 104857600 bytes.
Mon Oct 24 10:05:13 2011 -> Limits: File size limit set to 26214400 bytes.
Mon Oct 24 10:05:13 2011 -> Limits: Recursion level limit set to 16.
Mon Oct 24 10:05:13 2011 -> Limits: Files limit set to 10000.
Mon Oct 24 10:05:13 2011 -> Limits: Core-dump limit is 2147483647.
Mon Oct 24 10:05:13 2011 -> Archive support enabled.
Mon Oct 24 10:05:13 2011 -> Algorithmic detection enabled.
Mon Oct 24 10:05:13 2011 -> Portable Executable support enabled.
Mon Oct 24 10:05:13 2011 -> ELF support enabled.
Mon Oct 24 10:05:13 2011 -> Mail files support enabled.
Mon Oct 24 10:05:13 2011 -> OLE2 support enabled.
Mon Oct 24 10:05:13 2011 -> PDF support enabled.
Mon Oct 24 10:05:13 2011 -> HTML support enabled.
Mon Oct 24 10:05:13 2011 -> Self checking every 600 seconds.
Mon Oct 24 10:05:13 2011 -> Listening daemon: PID: 10989
Mon Oct 24 10:05:13 2011 -> MaxQueue set to: 100
Mon Oct 24 10:14:08 2011 -> Waiting for all threads to finish
Mon Oct 24 10:14:11 2011 -> Shutting down the main socket.
Mon Oct 24 10:14:11 2011 -> Pid file removed.
Mon Oct 24 10:14:11 2011 -> --- Stopped at Mon Oct 24 10:14:11 2011
Mon Oct 24 10:14:11 2011 -> Closing the main socket.
Mon Oct 24 10:14:11 2011 -> Socket file removed.

--
Matthew Slowe <m.slowe [at] kent> | Tel: +44 (0)1227 824265
Server Infrastructure Team, IS | Fax: +44 (0)1227 824078
University of Kent, Canterbury, Kent | Web: http://www.kent.ac.uk/

_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

M.Slowe at kent

Oct 24, 2011, 4:10 AM

Post #2 of 17 (1011 views)
Permalink

Re: clamd unexpected termination: "... Failure in bytecode testmode" [In reply to]

On 24 Oct 2011, at 11:13, Matthew Slowe wrote:

> Hi,
>
> I'm seeing a problem on a bunch of Solaris 10 SPARC servers running 0.97.x since about 00:55 BST this morning. Our 0.96 hosts seem to be ok (and I've downgraded the important 0.97 ones so that clamd can run...).
>
> The following error occurs $SELF_CHECK_INTERVAL (600s) after clamd start:

My apologies... it would help if I cut-and-paste the correct bit of log (the previous was the last time I shut it down before downgrading)...

Mon Oct 24 09:33:55 2011 -> +++ Started at Mon Oct 24 09:33:55 2011
Mon Oct 24 09:33:55 2011 -> clamd daemon 0.97.1 (OS: solaris2.10, ARCH: sparc, CPU: sparc)
Mon Oct 24 09:33:55 2011 -> Log file size limited to 268435456 bytes.
Mon Oct 24 09:33:55 2011 -> Reading databases from /var/clamav
Mon Oct 24 09:33:55 2011 -> Not loading PUA signatures.
Mon Oct 24 09:33:55 2011 -> Bytecode: Security mode set to "TrustSigned".
Mon Oct 24 09:34:51 2011 -> Loaded 1059084 signatures.
Mon Oct 24 09:34:57 2011 -> LOCAL: Unix socket file /tmp/clamd.socket
Mon Oct 24 09:34:57 2011 -> LOCAL: Setting connection queue length to 200
Mon Oct 24 09:34:57 2011 -> Limits: Global size limit set to 104857600 bytes.
Mon Oct 24 09:34:57 2011 -> Limits: File size limit set to 26214400 bytes.
Mon Oct 24 09:34:57 2011 -> Limits: Recursion level limit set to 16.
Mon Oct 24 09:34:57 2011 -> Limits: Files limit set to 10000.
Mon Oct 24 09:34:57 2011 -> Limits: Core-dump limit is 2147483647.
Mon Oct 24 09:34:57 2011 -> Archive support enabled.
Mon Oct 24 09:34:57 2011 -> Algorithmic detection enabled.
Mon Oct 24 09:34:57 2011 -> Portable Executable support enabled.
Mon Oct 24 09:34:57 2011 -> ELF support enabled.
Mon Oct 24 09:34:57 2011 -> Mail files support enabled.
Mon Oct 24 09:34:57 2011 -> OLE2 support enabled.
Mon Oct 24 09:34:57 2011 -> PDF support enabled.
Mon Oct 24 09:34:57 2011 -> HTML support enabled.
Mon Oct 24 09:34:57 2011 -> Self checking every 600 seconds.
Mon Oct 24 09:34:57 2011 -> Listening daemon: PID: 10542
Mon Oct 24 09:34:57 2011 -> MaxQueue set to: 100
Mon Oct 24 09:44:57 2011 -> No stats for Database check - forcing reload
Mon Oct 24 09:45:00 2011 -> Reading databases from /var/clamav
Mon Oct 24 09:46:03 2011 -> ERROR: Database initialization error: can't compile engine: Failure in bytecode testmode
Mon Oct 24 09:46:06 2011 -> Terminating because of a fatal error.
Mon Oct 24 09:46:06 2011 -> Waiting for all threads to finish
Mon Oct 24 09:46:06 2011 -> Shutting down the main socket.
Mon Oct 24 09:46:06 2011 -> Pid file removed.
Mon Oct 24 09:46:06 2011 -> --- Stopped at Mon Oct 24 09:46:06 2011
Mon Oct 24 09:46:06 2011 -> Closing the main socket.
Mon Oct 24 09:46:06 2011 -> Socket file removed.

Thanks,
Matthew

--
Matthew Slowe <m.slowe [at] kent> | Tel: +44 (0)1227 824265
Server Infrastructure Team, IS | Fax: +44 (0)1227 824078
University of Kent, Canterbury, Kent | Web: http://www.kent.ac.uk/
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

maegger at ee

Oct 24, 2011, 4:55 AM

Post #3 of 17 (1003 views)
Permalink

Re: clamd unexpected termination: "... Failure in bytecode testmode" [In reply to]

Hello all

On 24.10.2011 12:13, Matthew Slowe wrote:
> I'm seeing a problem on a bunch of Solaris 10 SPARC servers running 0.97.x since about 00:55 BST this morning.

Just wanted to confirm what Matthew sees.

* Also on Solaris 10 SPARC Machines
* Same Error since 01:52 MEST this Morning (which should be 00:55 BST?)
* Error occurs every 10 Minutes (SelfCheck 600)
* upgraded from 0.97.1 to 0.97.3 from scratch (with new definitions)

Since we monitor the service it get's restarted every 10min, but this
creates always a warning. So i prefer to solve the problem :-)

Here my clamconf -n

$ clamconf -n
Checking configuration files in /usr/pack/clamav-0.97.3-me/etc

Config file: clamd.conf
-----------------------
LogSyslog = "yes"
LogFacility = "LOG_MAIL"
LogVerbose = "yes"
PidFile = "/var/run/amavis/clamd.pid"
TemporaryDirectory = "/var/tmp"
LocalSocket = "/var/run/amavis/clamd.sock"
LocalSocketGroup = "amavis"
LocalSocketMode = "660"
StreamMaxLength = "262144000"
MaxThreads = "25"
ReadTimeout = "600"
User = "amavis"
BytecodeTimeout = "60000"
MaxFileSize = "31457280"
MaxRecursion = "10"
MaxFiles = "15000"

Config file: freshclam.conf
---------------------------
LogTime = "yes"
LogSyslog = "yes"
LogFacility = "LOG_MAIL"
DatabaseOwner = "local"
DatabaseMirror = "db.de.clamav.net", "database.clamav.net"
HTTPUserAgent = "clamav"

clamav-milter.conf not found

Software settings
-----------------
Version: 0.97.3
Optional features supported: MEMPOOL IPv6 AUTOIT_EA06 BZIP2 RAR

Database information
--------------------
Database directory: /usr/pack/clamav-0.97.3-me/share/clamav
[3rd Party] MSRBL-Images.hdb: 3004 sigs
main.cvd: version 54, sigs: 1044387, built on Tue Oct 11 16:34:20 2011
[3rd Party] junk.ndb: 38316 sigs
[3rd Party] MSRBL-SPAM.ndb: 2785 sigs
daily.cld: version 13843, sigs: 15910, built on Mon Oct 24 05:10:43 2011
bytecode.cvd: version 149, sigs: 39, built on Sun Oct 23 10:29:41 2011
Total number of signatures: 1104441

Platform information
--------------------
uname: solaris2.10
OS: solaris2.10, ARCH: sparc, CPU: sparc
Full OS version: Solaris 10 10/09 s10s_u8wos_08a SPARC
zlib version: 1.2.3 (1.2.3), compile flags: 55
platform id: 0x0e613f3f1400000000030403

Build information
-----------------
GNU C: 3.4.3 (csl-sol210-3_4-branch+sol_rpath) (3.4.3)
CPPFLAGS: -I/usr/pack/clamav-0.97.3-me/sun4u-sun-solaris2.10/include
CFLAGS: -O2 -I/usr/pack/clamav-0.97.3-me/include
CXXFLAGS:
LDFLAGS: -R/usr/pack/clamav-0.97.3-me/sun4u-sun-solaris2.10/lib
-L/usr/pack/clamav-0.97.3-me/sun4u-sun-solaris2.10/lib
Configure:
'--exec-prefix=/usr/pack/clamav-0.97.3-me/sun4u-sun-solaris2.10'
'--prefix=/usr/pack/clamav-0.97.3-me' '--disable-clamav'
'--disable-static' 'CC=gcc' 'CFLAGS=-O2
-I/usr/pack/clamav-0.97.3-me/include'
'LDFLAGS=-R/usr/pack/clamav-0.97.3-me/sun4u-sun-solaris2.10/lib
-L/usr/pack/clamav-0.97.3-me/sun4u-sun-solaris2.10/lib'
--enable-ltdl-convenience
sizeof(void*) = 4
Engine flevel: 63, dconf: 63

And here the relevant part from the logfile:

Oct 24 13:44:15 tardis clamd[18579]: [ID 702911 mail.info] No stats for
Database check - forcing reload
Oct 24 13:44:16 tardis clamd[18579]: [ID 702911 mail.info] Reading
databases from /usr/pack/clamav-0.97.3-me/share/clamav
Oct 24 13:44:30 tardis clamd[18579]: [ID 702911 mail.error] Database
initialization error: can't compile engine: Failure in bytecode testmode
Oct 24 13:44:30 tardis clamd[18579]: [ID 702911 mail.info] Terminating
because of a fatal error.
Oct 24 13:44:30 tardis clamd[18579]: [ID 702911 mail.debug] Waiting for
all threads to finish
Oct 24 13:44:30 tardis clamd[18579]: [ID 702911 mail.debug] Shutting
down the main socket.
Oct 24 13:44:30 tardis clamd[18579]: [ID 702911 mail.info] Pid file removed.
Oct 24 13:44:30 tardis clamd[18579]: [ID 702911 mail.info] --- Stopped
at Mon Oct 24 13:44:30 2011
Oct 24 13:44:30 tardis clamd[18579]: [ID 702911 mail.debug] Closing the
main socket.
Oct 24 13:44:30 tardis clamd[18579]: [ID 702911 mail.info] Socket file
removed.
Oct 24 13:45:02 tardis clamd[22637]: [ID 702911 mail.info] clamd daemon
0.97.3 (OS: solaris2.10, ARCH: sparc, CPU: sparc)
Oct 24 13:45:02 tardis clamd[22637]: [ID 702911 mail.info] Running as
user amavis (UID 65403, GID 65403)
Oct 24 13:45:02 tardis clamd[22637]: [ID 702911 mail.info] Log file size
limited to 1048576 bytes.
Oct 24 13:45:02 tardis clamd[22637]: [ID 702911 mail.info] Reading
databases from /usr/pack/clamav-0.97.3-me/share/clamav
Oct 24 13:45:02 tardis clamd[22637]: [ID 702911 mail.info] Not loading
PUA signatures.
Oct 24 13:45:02 tardis clamd[22637]: [ID 702911 mail.info] Bytecode:
Security mode set to "TrustSigned".
Oct 24 13:45:19 tardis clamd[22637]: [ID 702911 mail.info] LOCAL: Unix
socket file /var/run/amavis/clamd.sock
Oct 24 13:45:19 tardis clamd[22637]: [ID 702911 mail.info] LOCAL:
Setting connection queue length to 200
Oct 24 13:45:19 tardis clamd[22897]: [ID 702911 mail.info] Limits:
Global size limit set to 104857600 bytes.
Oct 24 13:45:19 tardis clamd[22897]: [ID 702911 mail.info] Limits: File
size limit set to 31457280 bytes.
Oct 24 13:45:19 tardis clamd[22897]: [ID 702911 mail.info] Limits:
Recursion level limit set to 10.
Oct 24 13:45:19 tardis clamd[22897]: [ID 702911 mail.info] Limits: Files
limit set to 15000.
Oct 24 13:45:19 tardis clamd[22897]: [ID 702911 mail.debug] Limits:
Core-dump limit is 0.
Oct 24 13:45:19 tardis clamd[22897]: [ID 702911 mail.info] Archive
support enabled.
Oct 24 13:45:19 tardis clamd[22897]: [ID 702911 mail.info] Algorithmic
detection enabled.
Oct 24 13:45:19 tardis clamd[22897]: [ID 702911 mail.info] Portable
Executable support enabled.
Oct 24 13:45:19 tardis clamd[22897]: [ID 702911 mail.info] ELF support
enabled.
Oct 24 13:45:19 tardis clamd[22897]: [ID 702911 mail.info] Mail files
support enabled.
Oct 24 13:45:19 tardis clamd[22897]: [ID 702911 mail.info] OLE2 support
enabled.
Oct 24 13:45:19 tardis clamd[22897]: [ID 702911 mail.info] PDF support
enabled.
Oct 24 13:45:19 tardis clamd[22897]: [ID 702911 mail.info] HTML support
enabled.
Oct 24 13:45:19 tardis clamd[22897]: [ID 702911 mail.info] Self checking
every 600 seconds.
Oct 24 13:45:19 tardis clamd[22897]: [ID 702911 mail.debug] Listening
daemon: PID: 22897
Oct 24 13:45:19 tardis clamd[22897]: [ID 702911 mail.debug] MaxQueue set
to: 25

Best Regards
Matthias Egger

--
Matthias Egger
ETH Zurich
Department of Information Technology maegger [at] ee
and Electrical Engineering
IT Support Group (ISG.EE), ETL/F/24.1 Phone +41 (0)44 632 03 90
Physikstrasse 3, CH-8092 Zurich Fax +41 (0)44 632 11 95
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

edwin at clamav

Oct 24, 2011, 5:03 AM

Post #4 of 17 (998 views)
Permalink

Re: clamd unexpected termination: "... Failure in bytecode testmode" [In reply to]

On 2011-10-24 14:55, Matthias Egger wrote:
> Hello all
>
> On 24.10.2011 12:13, Matthew Slowe wrote:
>> I'm seeing a problem on a bunch of Solaris 10 SPARC servers running 0.97.x since about 00:55 BST this morning.
>
> Just wanted to confirm what Matthew sees.
>
> * Also on Solaris 10 SPARC Machines
> * Same Error since 01:52 MEST this Morning (which should be 00:55 BST?)
> * Error occurs every 10 Minutes (SelfCheck 600)
> * upgraded from 0.97.1 to 0.97.3 from scratch (with new definitions)
>
> Since we monitor the service it get's restarted every 10min, but this creates always a warning. So i prefer to solve the problem :-)

I just published bytecode.cvd version 150 (and 151 should come out soon too). Does it fix the problem?

Best regards,
--Edwin
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

hodgson at cse

Oct 24, 2011, 5:04 AM

Post #5 of 17 (999 views)
Permalink

Re: clamd unexpected termination: "... Failure in bytecode testmode" [In reply to]

Same problem here.

--

Bryan Hodgson Lehigh University
bryan.hodgson [at] lehigh Packard Lab 019 room 115
610-758-5001 19 Memorial Drive West
Bethlehem, PA 18015-3016
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

preen at informatik

Oct 24, 2011, 5:12 AM

Post #6 of 17 (998 views)
Permalink

Re: clamd unexpected termination: "... Failure in bytecode testmode" [In reply to]

T�r�k Edwin wrote:
> On 2011-10-24 14:55, Matthias Egger wrote:
>> Hello all
>>
>> On 24.10.2011 12:13, Matthew Slowe wrote:
>>> I'm seeing a problem on a bunch of Solaris 10 SPARC servers running 0.97.x since about 00:55 BST this morning.
>> Just wanted to confirm what Matthew sees.
>>
>> * Also on Solaris 10 SPARC Machines
>> * Same Error since 01:52 MEST this Morning (which should be 00:55 BST?)
>> * Error occurs every 10 Minutes (SelfCheck 600)
>> * upgraded from 0.97.1 to 0.97.3 from scratch (with new definitions)
>>
>> Since we monitor the service it get's restarted every 10min, but this creates always a warning. So i prefer to solve the problem :-)
>
> I just published bytecode.cvd version 150 (and 151 should come out soon too). Does it fix the problem?

I have the same problems (Solaris 10, Sparc, Version 0.97.2).
The first event was yesterday, Oct 23, 14:12 MEST.

I just update to bytecode version 150 and it crashed again.

Regards.
Martin

---------------------------------------------------------------
Martin Preen, Universit�t Freiburg, Institut f�r Informatik
Georges-Koehler-Allee 52, Raum EG-006, 79110 Freiburg, Germany

phone: ++49 761 203-8250 preen [at] informatik
fax: ++49 761 203-8242 swt.informatik.uni-freiburg.de/~preen

edwin at clamav

Oct 24, 2011, 5:23 AM

Post #7 of 17 (998 views)
Permalink

Re: clamd unexpected termination: "... Failure in bytecode testmode" [In reply to]

On 2011-10-24 15:03, T�r�k Edwin wrote:
> On 2011-10-24 14:55, Matthias Egger wrote:
>> Hello all
>>
>> On 24.10.2011 12:13, Matthew Slowe wrote:
>>> I'm seeing a problem on a bunch of Solaris 10 SPARC servers running 0.97.x since about 00:55 BST this morning.
>>
>> Just wanted to confirm what Matthew sees.
>>
>> * Also on Solaris 10 SPARC Machines
>> * Same Error since 01:52 MEST this Morning (which should be 00:55 BST?)
>> * Error occurs every 10 Minutes (SelfCheck 600)
>> * upgraded from 0.97.1 to 0.97.3 from scratch (with new definitions)
>>
>> Since we monitor the service it get's restarted every 10min, but this creates always a warning. So i prefer to solve the problem :-)
>
> I just published bytecode.cvd version 150 (and 151 should come out soon too). Does it fix the problem?

152 is out which should include the fix for this crash on Sparc.
Once it reaches your mirrors and freshclam confirms that you got bytecode.cvd 152 can you test again to
see if it fixed the crash for you?

--Edwin
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

dehaenp at drever

Oct 24, 2011, 5:40 AM

Post #8 of 17 (1000 views)
Permalink

Re: clamd unexpected termination: "... Failure in bytecode testmode" [In reply to]

On 24 Oct 2011 at 15:23, T�r�k Edwin wrote:

> On 2011-10-24 15:03, T�r�k Edwin wrote:
> > On 2011-10-24 14:55, Matthias Egger wrote:
> >> Hello all
> >>
> >> On 24.10.2011 12:13, Matthew Slowe wrote:
> >>> I'm seeing a problem on a bunch of Solaris 10 SPARC servers running 0.97.x since about 00:55 BST this morning.
> >>
> >> Just wanted to confirm what Matthew sees.
> >>
> >> * Also on Solaris 10 SPARC Machines
> >> * Same Error since 01:52 MEST this Morning (which should be 00:55 BST?)
> >> * Error occurs every 10 Minutes (SelfCheck 600)
> >> * upgraded from 0.97.1 to 0.97.3 from scratch (with new definitions)
> >>
> >> Since we monitor the service it get's restarted every 10min, but this creates always a warning. So i prefer to solve the problem :-)
> >
> > I just published bytecode.cvd version 150 (and 151 should come out soon too). Does it fix the problem?
>
> 152 is out which should include the fix for this crash on Sparc.
> Once it reaches your mirrors and freshclam confirms that you got bytecode.cvd 152 can you test again to
> see if it fixed the crash for you?
>
Edwin,

The update just hit my server 2 minutes ago. In freshclam.log:

ClamAV update process started at Mon Oct 24 14:37:00 2011
main.cld is up to date (version: 54, sigs: 1044387, f-level: 60, builder: sven)
daily.cld is up to date (version: 13843, sigs: 15910, f-level: 60, builder: guitar)
Downloading bytecode-150.cdiff [100%]
Downloading bytecode-151.cdiff [100%]
Downloading bytecode-152.cdiff [100%]
bytecode.cld updated (version: 152, sigs: 38, f-level: 60, builder: edwin)
Database updated (1060335 signatures) from db.be.clamav.net (IP: 193.1.193.64)
Clamd successfully notified about the update.

In clamd.log:
Mon Oct 24 14:36:15 2011 -> Algorithmic detection enabled.
Mon Oct 24 14:36:15 2011 -> Portable Executable support enabled.
Mon Oct 24 14:36:15 2011 -> ELF support enabled.
Mon Oct 24 14:36:15 2011 -> Mail files support enabled.
Mon Oct 24 14:36:15 2011 -> OLE2 support enabled.
Mon Oct 24 14:36:15 2011 -> PDF support enabled.
Mon Oct 24 14:36:15 2011 -> HTML support enabled.
Mon Oct 24 14:36:15 2011 -> Self checking every 600 seconds.
Mon Oct 24 14:36:15 2011 -> /var/run/MIMEDefang/mdefang-
p9OCaCjA011594/Work/INPUTMBOX: Sanesecurity.Jurlbl.14950.UNOFFICIAL FOUND
Mon Oct 24 14:37:06 2011 -> Reading databases from /opt/clamav/share/clamav
Mon Oct 24 14:37:27 2011 -> ERROR: Database initialization error: can't compile engine:
Failure in bytecode testmode
Mon Oct 24 14:37:28 2011 -> Terminating because of a fatal error.
Mon Oct 24 14:37:28 2011 -> Pid file removed.
Mon Oct 24 14:37:28 2011 -> --- Stopped at Mon Oct 24 14:37:28 2011

Regards,
Pierre

_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

edwin at clamav

Oct 24, 2011, 5:44 AM

Post #9 of 17 (1000 views)
Permalink

Re: clamd unexpected termination: "... Failure in bytecode testmode" [In reply to]

On 2011-10-24 15:40, Pierre Dehaen wrote:
> On 24 Oct 2011 at 15:23, T�r�k Edwin wrote:
>
>> On 2011-10-24 15:03, T�r�k Edwin wrote:
>>> On 2011-10-24 14:55, Matthias Egger wrote:
>>>> Hello all
>>>>
>>>> On 24.10.2011 12:13, Matthew Slowe wrote:
>>>>> I'm seeing a problem on a bunch of Solaris 10 SPARC servers running 0.97.x since about 00:55 BST this morning.
>>>>
>>>> Just wanted to confirm what Matthew sees.
>>>>
>>>> * Also on Solaris 10 SPARC Machines
>>>> * Same Error since 01:52 MEST this Morning (which should be 00:55 BST?)
>>>> * Error occurs every 10 Minutes (SelfCheck 600)
>>>> * upgraded from 0.97.1 to 0.97.3 from scratch (with new definitions)
>>>>
>>>> Since we monitor the service it get's restarted every 10min, but this creates always a warning. So i prefer to solve the problem :-)
>>>
>>> I just published bytecode.cvd version 150 (and 151 should come out soon too). Does it fix the problem?
>>
>> 152 is out which should include the fix for this crash on Sparc.
>> Once it reaches your mirrors and freshclam confirms that you got bytecode.cvd 152 can you test again to
>> see if it fixed the crash for you?
>>
> Edwin,
>
> The update just hit my server 2 minutes ago. In freshclam.log:
>
> ClamAV update process started at Mon Oct 24 14:37:00 2011
> main.cld is up to date (version: 54, sigs: 1044387, f-level: 60, builder: sven)
> daily.cld is up to date (version: 13843, sigs: 15910, f-level: 60, builder: guitar)
> Downloading bytecode-150.cdiff [100%]
> Downloading bytecode-151.cdiff [100%]
> Downloading bytecode-152.cdiff [100%]
> bytecode.cld updated (version: 152, sigs: 38, f-level: 60, builder: edwin)
> Database updated (1060335 signatures) from db.be.clamav.net (IP: 193.1.193.64)
> Clamd successfully notified about the update.
>
> In clamd.log:
> Mon Oct 24 14:36:15 2011 -> Algorithmic detection enabled.
> Mon Oct 24 14:36:15 2011 -> Portable Executable support enabled.
> Mon Oct 24 14:36:15 2011 -> ELF support enabled.
> Mon Oct 24 14:36:15 2011 -> Mail files support enabled.
> Mon Oct 24 14:36:15 2011 -> OLE2 support enabled.
> Mon Oct 24 14:36:15 2011 -> PDF support enabled.
> Mon Oct 24 14:36:15 2011 -> HTML support enabled.
> Mon Oct 24 14:36:15 2011 -> Self checking every 600 seconds.
> Mon Oct 24 14:36:15 2011 -> /var/run/MIMEDefang/mdefang-
> p9OCaCjA011594/Work/INPUTMBOX: Sanesecurity.Jurlbl.14950.UNOFFICIAL FOUND
> Mon Oct 24 14:37:06 2011 -> Reading databases from /opt/clamav/share/clamav
> Mon Oct 24 14:37:27 2011 -> ERROR: Database initialization error: can't compile engine:
> Failure in bytecode testmode

Yes it still had the old one loaded, when you restart clamd now does it work?
Try clamdscan --reload and see if it still gives the ERROR.

--Edwin
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

dehaenp at drever

Oct 24, 2011, 5:48 AM

Post #10 of 17 (997 views)
Permalink

Re: clamd unexpected termination: "... Failure in bytecode testmode" [In reply to]

On 24 Oct 2011 at 15:44, T�r�k Edwin wrote:

> On 2011-10-24 15:40, Pierre Dehaen wrote:
> > On 24 Oct 2011 at 15:23, T�r�k Edwin wrote:
> >
> >> On 2011-10-24 15:03, T�r�k Edwin wrote:
> >>> On 2011-10-24 14:55, Matthias Egger wrote:
> >>>> Hello all
> >>>>
> >>>> On 24.10.2011 12:13, Matthew Slowe wrote:
> >>>>> I'm seeing a problem on a bunch of Solaris 10 SPARC servers running 0.97.x since about 00:55 BST this morning.
> >>>>
> >>>> Just wanted to confirm what Matthew sees.
> >>>>
> >>>> * Also on Solaris 10 SPARC Machines
> >>>> * Same Error since 01:52 MEST this Morning (which should be 00:55 BST?)
> >>>> * Error occurs every 10 Minutes (SelfCheck 600)
> >>>> * upgraded from 0.97.1 to 0.97.3 from scratch (with new definitions)
> >>>>
> >>>> Since we monitor the service it get's restarted every 10min, but this creates always a warning. So i prefer to solve the problem :-)
> >>>
> >>> I just published bytecode.cvd version 150 (and 151 should come out soon too). Does it fix the problem?
> >>
> >> 152 is out which should include the fix for this crash on Sparc.
> >> Once it reaches your mirrors and freshclam confirms that you got bytecode.cvd 152 can you test again to
> >> see if it fixed the crash for you?
> >>
> > Edwin,
> >
> > The update just hit my server 2 minutes ago. In freshclam.log:
> >
> > ClamAV update process started at Mon Oct 24 14:37:00 2011
> > main.cld is up to date (version: 54, sigs: 1044387, f-level: 60, builder: sven)
> > daily.cld is up to date (version: 13843, sigs: 15910, f-level: 60, builder: guitar)
> > Downloading bytecode-150.cdiff [100%]
> > Downloading bytecode-151.cdiff [100%]
> > Downloading bytecode-152.cdiff [100%]
> > bytecode.cld updated (version: 152, sigs: 38, f-level: 60, builder: edwin)
> > Database updated (1060335 signatures) from db.be.clamav.net (IP: 193.1.193.64)
> > Clamd successfully notified about the update.
> >
> > In clamd.log:
> > Mon Oct 24 14:36:15 2011 -> Algorithmic detection enabled.
> > Mon Oct 24 14:36:15 2011 -> Portable Executable support enabled.
> > Mon Oct 24 14:36:15 2011 -> ELF support enabled.
> > Mon Oct 24 14:36:15 2011 -> Mail files support enabled.
> > Mon Oct 24 14:36:15 2011 -> OLE2 support enabled.
> > Mon Oct 24 14:36:15 2011 -> PDF support enabled.
> > Mon Oct 24 14:36:15 2011 -> HTML support enabled.
> > Mon Oct 24 14:36:15 2011 -> Self checking every 600 seconds.
> > Mon Oct 24 14:36:15 2011 -> /var/run/MIMEDefang/mdefang-
> > p9OCaCjA011594/Work/INPUTMBOX: Sanesecurity.Jurlbl.14950.UNOFFICIAL FOUND
> > Mon Oct 24 14:37:06 2011 -> Reading databases from /opt/clamav/share/clamav
> > Mon Oct 24 14:37:27 2011 -> ERROR: Database initialization error: can't compile engine:
> > Failure in bytecode testmode
>
> Yes it still had the old one loaded, when you restart clamd now does it work?
> Try clamdscan --reload and see if it still gives the ERROR.

It looks good ! clamdscan --reload gives:
Mon Oct 24 14:47:42 2011 -> Reading databases from /opt/clamav/share/clamav
Mon Oct 24 14:48:04 2011 -> Database correctly reloaded (1159407 signatures)

Thank you Edwin !

_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

M.Slowe at kent

Oct 24, 2011, 5:53 AM

Post #11 of 17 (998 views)
Permalink

Re: clamd unexpected termination: "... Failure in bytecode testmode" [In reply to]

On 24 Oct 2011, at 13:48, Pierre Dehaen wrote:
>
> It looks good ! clamdscan --reload gives:
> Mon Oct 24 14:47:42 2011 -> Reading databases from /opt/clamav/share/clamav
> Mon Oct 24 14:48:04 2011 -> Database correctly reloaded (1159407 signatures)
>
> Thank you Edwin !

Forced --reload works for me too... now waiting for the unprovoked selftest ;-)

Thanks again!

--
Matthew Slowe <m.slowe [at] kent> | Tel: +44 (0)1227 824265
Server Infrastructure Team, IS | Fax: +44 (0)1227 824078
University of Kent, Canterbury, Kent | Web: http://www.kent.ac.uk/

_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

M.Slowe at kent

Oct 24, 2011, 6:04 AM

Post #12 of 17 (999 views)
Permalink

Re: clamd unexpected termination: "... Failure in bytecode testmode" [In reply to]

On 24 Oct 2011, at 13:53, Matthew Slowe wrote:

> On 24 Oct 2011, at 13:48, Pierre Dehaen wrote:
>>
>> It looks good ! clamdscan --reload gives:
>> Mon Oct 24 14:47:42 2011 -> Reading databases from /opt/clamav/share/clamav
>> Mon Oct 24 14:48:04 2011 -> Database correctly reloaded (1159407 signatures)
>>
>> Thank you Edwin !
>
> Forced --reload works for me too... now waiting for the unprovoked selftest ;-)
>
> Thanks again!

Yup -- all good here.

Ta,
Matthew
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

maegger at ee

Oct 24, 2011, 6:23 AM

Post #13 of 17 (991 views)
Permalink

Re: clamd unexpected termination: "... Failure in bytecode testmode" [In reply to]

Hello Edwin

On 24.10.2011 14:23, T�r�k Edwin wrote:
> 152 is out which should include the fix for this crash on Sparc.
> Once it reaches your mirrors and freshclam confirms that you got bytecode.cvd 152 can you test again to
> see if it fixed the crash for you?

* bytecode has been updated a few minutes ago:

Oct 24 14:45:05 drwho.ee.ethz.ch freshclam[25498]: [ID 702911 mail.info]
bytecode.cld updated (version: 152, sigs: 38, f-level: 60, builder: edwin)

Oct 24 14:45:08 tranquillity freshclam[2004]: [ID 702911 mail.info]
bytecode.cld updated (version: 152, sigs: 38, f-level: 60, builder: edwin)

* I manually stopped and restarted clamav.

* After 10 Minutes:

Oct 24 14:58:19 tranquillity clamd[2115]: [ID 702911 mail.info] No stats
for Database check - forcing reload
Oct 24 14:58:19 tranquillity clamd[2115]: [ID 702911 mail.info] Reading
databases from /usr/pack/clamav-0.97.3-me/share/clamav
Oct 24 14:58:36 tranquillity clamd[2115]: [ID 702911 mail.info] Database
correctly reloaded (1103188 signatures)

Oct 24 14:59:52 tardis clamd[16095]: [ID 702911 mail.info] No stats for
Database check - forcing reload
Oct 24 14:59:53 tardis clamd[16095]: [ID 702911 mail.info] Reading
databases from /usr/pack/clamav-0.97.3-me/share/clamav
Oct 24 15:00:07 tardis clamd[16095]: [ID 702911 mail.info] Database
correctly reloaded (1103188 signatures)

* After 10 more Minutes:
Oct 24 15:08:36 tranquillity.ee.ethz.ch clamd[2115]: [ID 702911
mail.info] SelfCheck: Database status OK.
Oct 24 15:10:11 tardis clamd[16095]: [ID 702911 mail.info] SelfCheck:
Database status OK.

* And after 10 more Minutes (just to be sure :-) ):
Oct 24 15:18:36 tranquillity.ee.ethz.ch clamd[2115]: [ID 702911
mail.info] SelfCheck: Database status OK.
Oct 24 15:20:12 tardis clamd[16095]: [ID 702911 mail.info] SelfCheck:
Database status OK.

So looks like you solved it Edwin. Thanks a lot!

Best regards
Matthias
--
Matthias Egger
ETH Zurich
Department of Information Technology maegger [at] ee
and Electrical Engineering
IT Support Group (ISG.EE), ETL/F/24.1 Phone +41 (0)44 632 03 90
Physikstrasse 3, CH-8092 Zurich Fax +41 (0)44 632 11 95
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

preen at informatik

Oct 24, 2011, 6:48 AM

Post #14 of 17 (990 views)
Permalink

Re: clamd unexpected termination: "... Failure in bytecode testmode" [In reply to]

Matthew Slowe wrote:
> On 24 Oct 2011, at 13:53, Matthew Slowe wrote:
>
>> On 24 Oct 2011, at 13:48, Pierre Dehaen wrote:
>>> It looks good ! clamdscan --reload gives:
>>> Mon Oct 24 14:47:42 2011 -> Reading databases from /opt/clamav/share/clamav
>>> Mon Oct 24 14:48:04 2011 -> Database correctly reloaded (1159407 signatures)
>>>
>>> Thank you Edwin !
>> Forced --reload works for me too... now waiting for the unprovoked selftest ;-)
>>
>> Thanks again!
>
> Yup -- all good here.

For me too.

Thanks.
Martin

---------------------------------------------------------------
Martin Preen, Universit�t Freiburg, Institut f�r Informatik
Georges-Koehler-Allee 52, Raum EG-006, 79110 Freiburg, Germany

phone: ++49 761 203-8250 preen [at] informatik
fax: ++49 761 203-8242 swt.informatik.uni-freiburg.de/~preen

David.Alix at isc

Oct 24, 2011, 6:48 AM

Post #15 of 17 (996 views)
Permalink

Re: clamd unexpected termination: "... Failure in bytecode testmode" [In reply to]

Unfortunately, it may not be fixed on Solaris 9. My earlier problem went
away with the update to daily.cld 13840. This different problem began
yesterday with the update to daily.cld 13842.

This is the update I saw in freshclam.log:
Received signal: wake up
ClamAV update process started at Mon Oct 24 05:46:02 2011
main.cld is up to date (version: 54, sigs: 1044387, f-level: 60, builder:
sven)
daily.cld is up to date (version: 13843, sigs: 15910, f-level: 60, builder:
guitar)
connect_error: getsockopt(SO_ERROR): fd=5 error=146: Connection refused
Can't connect to port 80 of host db.us.clamav.net (IP: 69.12.162.28)
Downloading bytecode-151.cdiff [100%]
Downloading bytecode-152.cdiff [100%]
bytecode.cld updated (version: 152, sigs: 38, f-level: 60, builder: edwin)
Database updated (1060335 signatures) from db.us.clamav.net (IP:
64.22.33.90)
--------------------------------------

and the next datacheck produced this in clamd.log:

Mon Oct 24 06:27:15 2011 -> No stats for Database check - forcing reload
Mon Oct 24 06:27:16 2011 -> Reading databases from /opt/ClamAV/share/clamav
Mon Oct 24 06:27:27 2011 -> ERROR: Database initialization error: can't
compile engine: Failure in bytecode testmode
Mon Oct 24 06:27:27 2011 -> Terminating because of a fatal error.
Mon Oct 24 06:27:27 2011 -> Waiting for all threads to finish
Mon Oct 24 06:27:27 2011 -> Shutting down the main socket.
Mon Oct 24 06:27:27 2011 -> Pid file removed.
Mon Oct 24 06:27:27 2011 -> --- Stopped at Mon Oct 24 06:27:27 2011
Mon Oct 24 06:27:27 2011 -> Closing the main socket.
Mon Oct 24 06:27:27 2011 -> Socket file removed.

my output from clamconf -n:

Checking configuration files in /opt/ClamAV/etc

Config file: clamd.conf
-----------------------
LogFile = "/var/log/clamd.log"
LogFileMaxSize = "1048576000"
LogTime = "yes"
LogSyslog = "yes"
LogVerbose = "yes"
PidFile = "/var/run/clamd.pid"
LocalSocket = "/var/spool/MIMEDefang/clamd.sock"
StreamMaxLength = "52428800"
SelfCheck = "7200"
PhishingScanURLs disabled
StructuredSSNFormatNormal disabled

Config file: freshclam.conf
---------------------------
LogFileMaxSize = "10485760"
PidFile = "/var/run/freshclam.pid"
UpdateLogFile = "/var/log/freshclam.log"
Checks = "24"
DatabaseMirror = "db.us.clamav.net", "database.clamav.net"

Config file: clamav-milter.conf
-------------------------------

Software settings
-----------------
Version: 0.97.1
Optional features supported: MEMPOOL IPv6 AUTOIT_EA06 BZIP2 RAR

Database information
--------------------
Database directory: /opt/ClamAV/share/clamav
main.cld: version 54, sigs: 1044387, built on Tue Oct 11 07:34:20 2011
daily.cld: version 13843, sigs: 15910, built on Sun Oct 23 20:10:43 2011
bytecode.cld: version 152, sigs: 38, built on Mon Oct 24 05:07:39 2011
Total number of signatures: 1060335

Platform information
--------------------
uname: solaris2.9
OS: solaris2.9, ARCH: sparc, CPU: sparc
Full OS version: Solaris 9 9/04 s9s_u7wos_09 SPARC
zlib version: 1.1.4 (1.1.4)
platform id: 0x0e613d3d1800000000030403

Build information
-----------------
GNU C: 3.4.3 (3.4.3)
CPPFLAGS: -I/opt/GNUmp/include -I/opt/sendmail/include
CFLAGS: -g -O2
CXXFLAGS:
LDFLAGS: -static-libgcc -L/opt/GNUmp/slib -L/opt/sendmail/lib
Configure: '--prefix=/opt/ClamAV' '--sysconfdir=/opt/ClamAV/etc'
'--with-user=clamav' '--with-group=clamav' '--enable-readdir_r'
'--enable-milter' 'CC=gcc' 'LDFLAGS=-static-libgcc -L/opt/GNUmp/slib
-L/opt/sendmail/lib' 'CPPFLAGS=-I/opt/GNUmp/include
-I/opt/sendmail/include' --enable-ltdl-convenience
sizeof(void*) = 8
Engine flevel: 61, dconf: 61

--On Monday, October 24, 2011 3:23 PM +0200 Matthias Egger
<maegger [at] ee> wrote:

> Hello Edwin
>
> On 24.10.2011 14:23, T�r�k Edwin wrote:
>> 152 is out which should include the fix for this crash on Sparc.
>> Once it reaches your mirrors and freshclam confirms that you got
>> bytecode.cvd 152 can you test again to see if it fixed the crash for you?
>
> * bytecode has been updated a few minutes ago:
>
> Oct 24 14:45:05 drwho.ee.ethz.ch freshclam[25498]: [ID 702911 mail.info]
> bytecode.cld updated (version: 152, sigs: 38, f-level: 60, builder: edwin)
>
> Oct 24 14:45:08 tranquillity freshclam[2004]: [ID 702911 mail.info]
> bytecode.cld updated (version: 152, sigs: 38, f-level: 60, builder: edwin)
>
> * I manually stopped and restarted clamav.
>
> * After 10 Minutes:
>
> Oct 24 14:58:19 tranquillity clamd[2115]: [ID 702911 mail.info] No stats
> for Database check - forcing reload
> Oct 24 14:58:19 tranquillity clamd[2115]: [ID 702911 mail.info] Reading
> databases from /usr/pack/clamav-0.97.3-me/share/clamav
> Oct 24 14:58:36 tranquillity clamd[2115]: [ID 702911 mail.info] Database
> correctly reloaded (1103188 signatures)
>
> Oct 24 14:59:52 tardis clamd[16095]: [ID 702911 mail.info] No stats for
> Database check - forcing reload
> Oct 24 14:59:53 tardis clamd[16095]: [ID 702911 mail.info] Reading
> databases from /usr/pack/clamav-0.97.3-me/share/clamav
> Oct 24 15:00:07 tardis clamd[16095]: [ID 702911 mail.info] Database
> correctly reloaded (1103188 signatures)
>
> * After 10 more Minutes:
> Oct 24 15:08:36 tranquillity.ee.ethz.ch clamd[2115]: [ID 702911
> mail.info] SelfCheck: Database status OK.
> Oct 24 15:10:11 tardis clamd[16095]: [ID 702911 mail.info] SelfCheck:
> Database status OK.
>
> * And after 10 more Minutes (just to be sure :-) ):
> Oct 24 15:18:36 tranquillity.ee.ethz.ch clamd[2115]: [ID 702911
> mail.info] SelfCheck: Database status OK.
> Oct 24 15:20:12 tardis clamd[16095]: [ID 702911 mail.info] SelfCheck:
> Database status OK.
>
> So looks like you solved it Edwin. Thanks a lot!
>
> Best regards
> Matthias
> -- Matthias Egger
> ETH Zurich
> Department of Information Technology maegger [at] ee
> and Electrical Engineering
> IT Support Group (ISG.EE), ETL/F/24.1 Phone +41 (0)44 632 03 90
> Physikstrasse 3, CH-8092 Zurich Fax +41 (0)44 632 11 95
> _______________________________________________
> Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
> http://www.clamav.net/support/ml

___________________________________
David Alix
Information Systems and Computing
David.Alix [at] isc
(805)893-4456
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

edwintorok at gmail

Oct 24, 2011, 6:57 AM

Post #16 of 17 (988 views)
Permalink

Re: clamd unexpected termination: "... Failure in bytecode testmode" [In reply to]

On 2011-10-24 16:48, David Alix wrote:
> Unfortunately, it may not be fixed on Solaris 9. My earlier problem went away with the update to daily.cld 13840. This different problem began yesterday with the update to daily.cld 13842.
>
> This is the update I saw in freshclam.log:
> Received signal: wake up
> ClamAV update process started at Mon Oct 24 05:46:02 2011
> main.cld is up to date (version: 54, sigs: 1044387, f-level: 60, builder: sven)
> daily.cld is up to date (version: 13843, sigs: 15910, f-level: 60, builder: guitar)
> connect_error: getsockopt(SO_ERROR): fd=5 error=146: Connection refused
> Can't connect to port 80 of host db.us.clamav.net (IP: 69.12.162.28)
> Downloading bytecode-151.cdiff [100%]
> Downloading bytecode-152.cdiff [100%]
> bytecode.cld updated (version: 152, sigs: 38, f-level: 60, builder: edwin)
> Database updated (1060335 signatures) from db.us.clamav.net (IP: 64.22.33.90)
> --------------------------------------
>
> and the next datacheck produced this in clamd.log:
>
> Mon Oct 24 06:27:15 2011 -> No stats for Database check - forcing reload
> Mon Oct 24 06:27:16 2011 -> Reading databases from /opt/ClamAV/share/clamav
> Mon Oct 24 06:27:27 2011 -> ERROR: Database initialization error: can't compile engine: Failure in bytecode testmode

This is because it still had the old bytecode loaded, which triggers the bug.
Try starting clamd manually (now that you have version 152), and then it should work, even after a --reload of self-check.

Best regards,
--Edwin
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

david.alix at isc

Oct 24, 2011, 8:47 AM

Post #17 of 17 (996 views)
Permalink

Re: clamd unexpected termination: "... Failure in bytecode testmode" [In reply to]

Quite right. The next self-check did complete without a problem. Thanks
so much for your help.

David

--On Monday, October 24, 2011 4:57 PM +0300 T�r�k Edwin
<edwintorok [at] gmail> wrote:

> On 2011-10-24 16:48, David Alix wrote:
>> Unfortunately, it may not be fixed on Solaris 9. My earlier problem
>> went away with the update to daily.cld 13840. This different problem
>> began yesterday with the update to daily.cld 13842.
>>
>> This is the update I saw in freshclam.log:
>> Received signal: wake up
>> ClamAV update process started at Mon Oct 24 05:46:02 2011
>> main.cld is up to date (version: 54, sigs: 1044387, f-level: 60,
>> builder: sven) daily.cld is up to date (version: 13843, sigs: 15910,
>> f-level: 60, builder: guitar) connect_error: getsockopt(SO_ERROR): fd=5
>> error=146: Connection refused Can't connect to port 80 of host
>> db.us.clamav.net (IP: 69.12.162.28) Downloading bytecode-151.cdiff [100%]
>> Downloading bytecode-152.cdiff [100%]
>> bytecode.cld updated (version: 152, sigs: 38, f-level: 60, builder:
>> edwin) Database updated (1060335 signatures) from db.us.clamav.net (IP:
>> 64.22.33.90) --------------------------------------
>>
>> and the next datacheck produced this in clamd.log:
>>
>> Mon Oct 24 06:27:15 2011 -> No stats for Database check - forcing reload
>> Mon Oct 24 06:27:16 2011 -> Reading databases from
>> /opt/ClamAV/share/clamav Mon Oct 24 06:27:27 2011 -> ERROR: Database
>> initialization error: can't compile engine: Failure in bytecode testmode
>
> This is because it still had the old bytecode loaded, which triggers the
> bug. Try starting clamd manually (now that you have version 152), and
> then it should work, even after a --reload of self-check.
>
> Best regards,
> --Edwin
> _______________________________________________
> Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
> http://www.clamav.net/support/ml

___________________________________
David Alix
Information Systems and Computing
David.Alix [at] isc
(805)893-4456
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Index | Next | Previous | View Threaded

Interested in having your list archived? Contact Gossamer Threads