Mailing List Archive

[clamav-users] Now i know what is the problem!
Hi @ all,
Hi Micah,

now i know what the problem is with clamscan (see text below in quote).
Strangely enough, with the same .eml files, all scans went through yesterday without any problems.
Today the very first scan caused clamscan to hang again, it just stopped scanning.

For whatever reason, this happens when a mail is only a few kb in size but has absolutely no content, I opened the affected mail with every text editor, and it was empty in all of them.

Why this mail is empty from yesterday to today I don't know.
Here one would have to investigate and build in additional error handling.
The process just hung, with no error message or log.

@Micah Snyder: should I open a ticket on github?

kind greetings
Marc


> Hi there,
>
> do we have currently a problem with the database files?
> my cronjob, stops without any error or something on scanning files and in case did not delete his tmp files.
>
> Yesterday I have deleted a lot of mails and this solved the problem yesterday but today the same problem, with messages that yesterday worked well!
>
> can anybody confirm this problem too?
>
> @Micah Synder?
>
> kind greetings
> newcomer01
_______________________________________________

Manage your clamav-users mailing list subscription / unsubscribe:
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/Cisco-Talos/clamav-documentation

https://docs.clamav.net/#mailing-lists-and-chat
Re: [clamav-users] Now i know what is the problem! [ In reply to ]
On 06.05.23 16:14, newcomer01 via clamav-users wrote:
>now i know what the problem is with clamscan (see text below in quote).
>Strangely enough, with the same .eml files, all scans went through yesterday without any problems.
>Today the very first scan caused clamscan to hang again, it just stopped scanning.
>
>For whatever reason, this happens when a mail is only a few kb in size but has absolutely no content, I opened the affected mail with every text editor, and it was empty in all of them.
>
>Why this mail is empty from yesterday to today I don't know.
>Here one would have to investigate and build in additional error handling.
>The process just hung, with no error message or log.

Do you have that file available somewhere so we can check?


--
Matus UHLAR - fantomas, uhlar@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Microsoft dick is soft to do no harm
_______________________________________________

Manage your clamav-users mailing list subscription / unsubscribe:
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/Cisco-Talos/clamav-documentation

https://docs.clamav.net/#mailing-lists-and-chat
Re: [clamav-users] Now i know what is the problem! [ In reply to ]
> On May 6, 2023, at 11:14 AM, newcomer01 via clamav-users <clamav-users@lists.clamav.net> wrote:
>
>
> For whatever reason, this happens when a mail is only a few kb in size but has absolutely no content, I opened the affected mail with every text editor, and it was empty in all of them.
>

This needs further explanation. A file that’s a few kb can’t also be empty. Please provide the file somewhere - pastebin or such.


> Why this mail is empty from yesterday to today I don't know.

This suggests a file system or disk problem. What is the file system?

Maybe clamscan is hung waiting on broken disk io

Clamav, nor anything, can be expected to work normally and reliably if there are underlying system problems.


— Noel Jones
_______________________________________________

Manage your clamav-users mailing list subscription / unsubscribe:
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/Cisco-Talos/clamav-documentation

https://docs.clamav.net/#mailing-lists-and-chat
Re: [clamav-users] Now i know what is the problem! [ In reply to ]
here ist the download to the .zip file
https://filehorst.de/d/evcoHEae

for additional infos about filesystem, usage, so on please see attached screenshot.
My mails are in /home/USERNAME/.thunderbird/ ...


Von / From: Noel Jones <mailto:njones@megan.vbhcs.org>
An / To: Newcomer01 <mailto:newcomer01@posteo.de>
Gesendet / Sent: Samstag, Mai 06, 2023 um 23:07 (at 11:07 PM) +0200
Betreff / Subject: Re: [clamav-users] Now i know what is the problem!
>> On May 6, 2023, at 11:14 AM, newcomer01 via clamav-users <clamav-users@lists.clamav.net> wrote:
>>
>>
>> For whatever reason, this happens when a mail is only a few kb in size but has absolutely no content, I opened the affected mail with every text editor, and it was empty in all of them.
>>
> This needs further explanation. A file that’s a few kb can’t also be empty. Please provide the file somewhere - pastebin or such.
>
>
>> Why this mail is empty from yesterday to today I don't know.
> This suggests a file system or disk problem. What is the file system?
>
> Maybe clamscan is hung waiting on broken disk io
>
> Clamav, nor anything, can be expected to work normally and reliably if there are underlying system problems.
>
>
> — Noel Jones
> _______________________________________________
>
> Manage your clamav-users mailing list subscription / unsubscribe:
> https://lists.clamav.net/mailman/listinfo/clamav-users
>
>
> Help us build a comprehensive ClamAV guide:
> https://github.com/Cisco-Talos/clamav-documentation
>
> https://docs.clamav.net/#mailing-lists-and-chat