[sanesecurity] Re: winnow_phish_complete is now invalid clamav db

  • From: "Michael Mansour" <mic@xxxxxxxxxxx>
  • To: sanesecurity@xxxxxxxxxxxxx
  • Date: Sat, 24 Oct 2009 11:03:50 +1100

Hi Peter,

> >> Done. Bugzilla number 1722.
> >>
> >> Done. Problem still exists. Tested under CentOS 5.4 on x86_64 using
> >> clamav version devel-20091023.
> >>
> > Thanks John,
> >
> > Sounds like a x86_64 problem perhaps...
> >
> > Cheers,
> >
> > Steve
> > Sanesecurity
> >
> 
> For the record, it's working fine on CentOS 5.4 x86_64 for me (Clamd 
> 0.95.2).
> 
> Perhaps it's related to the number of sigs loaded - I only use the
> relatively safe DBs.
> 
> Also curious whether those seeing problems have run memtest86+ or similar
> to verify their hardware is OK???

I am seeing this problem:

Starting Clam AntiVirus Daemon: LibClamAV Error: mpool_malloc(): Attempt to
allocate 2097152 bytes. Please report to http://bugs.clamav.net
LibClamAV Error: cli_ac_addpatt: Can't realloc ac_pattable
LibClamAV Error: cli_parse_add(): Problem adding signature (1).
LibClamAV Error: Problem parsing database at line 7728
LibClamAV Error: Can't load /var/clamav/spear.ndb: Malformed database
ERROR: Malformed database

on two DL380 G4's with 4 Gb of HP ECC Registered RAM. One of them has issues
with spear.ndb while the other has issues with scam.ndb. Extremely unlikely
it's a physical hardware RAM problem.

Other DL360's (less than G4's) also with HP ECC Registered RAM have no
problems, yet they are a mix of 2Gb and 4Gb mail servers.

The difference being, the DL380 G4's are 64bit Linux while the DL360's are
32bit Linux. So the ClamAV they're running are 64bit for the 64bit Linux and
32bit for the 32bit Linux.

I use Dag's RPM's for ClamAV/clamd.

A good test would be to install the 32bit ClamAV/clamd onto the 64bit Linux
and see if the problem persists.

I can't do this on production servers though.

Michael.

> Peter
------- End of Original Message -------


Other related posts: