HTTP Anti-Virus Proxy

Official HAVP Support Forum
Registration disabled, I'm tired of spambots. E-mail havp@hege.li if you have questions.
HAVP project is pretty much frozen/abandoned at this time anyway.


All times are UTC + 2 hours [ DST ]




Post new topic Reply to topic  [ 26 posts ]  Go to page 1, 2  Next
Author Message
PostPosted: 09 Oct 2007 05:09 
Offline

Joined: 06 Aug 2007 16:29
Posts: 48
Hi,

There are some strange message show in system log, attach for reference

havp[23572]: segfault at 0000000000000010 rip 000000000806a728 rsp 00000000ffffcab0 error 4
havp[23796]: segfault at 0000000000000010 rip 000000000806a728 rsp 00000000ffffcab0 error 4
havp[23594]: segfault at 0000000000000010 rip

Centos 4 update 5 x64 version

Anybody meet similar problem?


Top
 Profile  
 
 Post subject:
PostPosted: 09 Oct 2007 10:52 
Offline
HAVP Developer

Joined: 27 Feb 2006 18:12
Posts: 687
Location: Finland
I don't think HAVP is still safe for 64-bit systems. Never had one to test properly.


Top
 Profile  
 
PostPosted: 26 Nov 2008 11:41 
Offline

Joined: 10 Oct 2008 11:27
Posts: 17
I get these several times per day:
Quote:
kernel: [4147656.066986] havp[11132]: segfault at 0000000000000014 rip 000000000042214c rsp 00007fffe6163e40 error 4


Ubuntu 7.10

uname -a
Linux 2.6.22-14-server #1 SMP Tue Feb 12 08:27:05 UTC 2008 i686 GNU/Linux

I have about 100k GETs per day through the proxy, am running 300 processes in parallel, with Squid between the PCs and havp.

Users havn't complained, but I'd like to know why this happens.

Have others the same problem? Any idea where to start searching? Havp itself does not log errors that might indicate an issue..


Top
 Profile  
 
PostPosted: 26 Nov 2008 13:54 
Offline
HAVP Developer

Joined: 27 Feb 2006 18:12
Posts: 687
Location: Finland
Is this 64-bit system too?

Unfortunately there is a need for developer to fix things..


Top
 Profile  
 
PostPosted: 26 Nov 2008 16:23 
Offline

Joined: 10 Oct 2008 11:27
Posts: 17
This is not 64 bit, "uname -a" shows x86_64 for such systems.


Top
 Profile  
 
PostPosted: 26 Nov 2008 16:26 
Offline
HAVP Developer

Joined: 27 Feb 2006 18:12
Posts: 687
Location: Finland
Do you use library scanner? ClamAV? Recent version?

It's also possible that it's the havp-clamav-library process which is crashing. You could try changing to clamd to see if it "fixes" the issue.


Top
 Profile  
 
PostPosted: 26 Nov 2008 17:32 
Offline

Joined: 10 Oct 2008 11:27
Posts: 17
Yes its the clam library version, the libclamav2 package in Ubuntu 7.10.

Versions: 0.91.2-3ubuntu2.4

I see to remember from the docs that the library was recommended over the clam daemon?

Sean


Top
 Profile  
 
PostPosted: 26 Nov 2008 17:41 
Offline
HAVP Developer

Joined: 27 Feb 2006 18:12
Posts: 687
Location: Finland
boran wrote:
Yes its the clam library version, the libclamav2 package in Ubuntu 7.10.

Versions: 0.91.2-3ubuntu2.4

I see to remember from the docs that the library was recommended over the clam daemon?


Yes library is preferred for better control of scanner. I seriously recommend getting 0.94.2, it makes no sense to keep such ancient "stable" (such word does not exist in spam/virus world) version. There have been many new features and fixes since.

For debian there is volatile-repository that has always the newest versions, I don't know if ubuntu has such. You may have to compile.


Top
 Profile  
 
PostPosted: 02 Dec 2008 15:10 
Offline

Joined: 10 Oct 2008 11:27
Posts: 17
I've upgraded from Ubuntu 7.10 to 8.04, and thus also the clamav libraries.
No segfaults so far...


Top
 Profile  
 
PostPosted: 08 Jan 2009 00:45 
Offline

Joined: 10 Oct 2008 11:27
Posts: 17
Just to note the segfaults started again before Christmas and again now. With 100k hits per day there are maybe 5-10 seg faults.

I've tried to match visited sites from the squid log to find a pattern, but no luck yet.
Its that kernel that kills the process, so its not obvious to me how to trace this within havp. The system is not overloaded in terms or cpu, memory or i/o.

Any suggestions on tracing the issue?

Thanks in advance,


Top
 Profile  
 
PostPosted: 14 Jan 2009 09:15 
Offline

Joined: 23 Apr 2008 09:36
Posts: 101
It's a presumption: Are you sure, your memory is working correctly? If you have much memory, the system needs a little time to use the whole memory.
A friend of me is using 8GB memory and had the same problems. After the system is working correctly for a few of days, suddenly the system says segfaults.


Top
 Profile  
 
PostPosted: 14 Jan 2009 09:26 
Offline

Joined: 10 Oct 2008 11:27
Posts: 17
Interesting idea, but:
- I have 2GB but its mostly unused according to htop.
- And there are two parallel proxies, same hw/os/havp version. Both segfault.


Top
 Profile  
 
PostPosted: 14 Jan 2009 15:29 
Offline

Joined: 23 Apr 2008 09:36
Posts: 101
Quote:
I've upgraded from Ubuntu 7.10 to 8.04, and thus also the clamav libraries.
No segfaults so far...


Did you recompiled the havp package after upgrading clamav 0.94.2? This is very important!


Top
 Profile  
 
PostPosted: 15 Jan 2009 17:47 
Offline

Joined: 10 Oct 2008 11:27
Posts: 17
No, and that makes sense. I'll post back after re-compiling and letting it run for a few days.


Top
 Profile  
 
PostPosted: 20 Jan 2009 09:19 
Offline

Joined: 10 Oct 2008 11:27
Posts: 17
The segfaults have started again, although its seems less frequent. Each message happens grouped 3-4 times

Quote:
07:17 proxy2 kernel: [4212750.661286] havp[23181]: segfault at 0000000c eip 0806c5fc esp bfd1cb10 error 4 ..
10:34 proxy1 kernel: [3613461.911941] havp[15878]: segfault at 14 rip 424528 rsp 7fff1e186c00 error 4
..
13:45 proxy2 kernel: [4235987.892496] havp[25228]: segfault at 0000000c eip 0806c5fc esp bfd1cb10 error 4
..


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 26 posts ]  Go to page 1, 2  Next

All times are UTC + 2 hours [ DST ]


Who is online

Users browsing this forum: Google [Bot] and 2 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB® Forum Software © phpBB Group