HTTP Anti-Virus Proxy

Official HAVP Support Forum
Registration disabled, I'm tired of spambots. E-mail havp@hege.li if you have questions.
HAVP project is pretty much frozen/abandoned at this time anyway.
It is currently 22 Jun 2014 09:52

All times are UTC + 2 hours [ DST ]




Post new topic Reply to topic  [ 7 posts ] 
Author Message
 Post subject: error with PID file
PostPosted: 26 Dec 2007 10:10 
Offline

Joined: 24 Dec 2007 17:37
Posts: 10
after starting HAVP in log file I have
Code:
 --- Initializing ClamAV Library Scanner
26/12/2007 09:40:52 ClamAV: Using database directory: /var/db/clamav
26/12/2007 09:40:56 ClamAV: Loaded 181057 signatures (engine 0.91.2)
26/12/2007 09:40:56 ClamAV Library Scanner passed EICAR virus test (Eicar-Test-S
ignature)
26/12/2007 09:40:56 --- All scanners initialized
26/12/2007 09:40:56 Can not write to PIDFILE!
26/12/2007 09:40:56 Process ID: 736
 


Code:
cd /var/run
ls -l
...
drwxrwxr-x  2 nobody  nobody    512 Dec 24 16:19 havp
...


havp.config
Code:
 USER nobody
 GROUP nobody


#
# Process id (PID) of the main HAVP process is written to this file.
# Be sure that it is writeable by the user under which HAVP is running.
# /etc/init.d/havp script requires this to work.
#
# Default:
# PIDFILE /var/run/havp/havp.pid


Why HAVP can't create PID file?

ClamAV Library Scanner passed EICAR virus test (Eicar-Test-S
ignature) - why did he pass? EICAR is the test virus, that I try to download to test HAVP, but it passed him. And after that he write this string after each load. WHy?


Top
 Profile  
 
 Post subject: Re: error with PID file
PostPosted: 26 Dec 2007 13:11 
Offline
HAVP Developer

Joined: 27 Feb 2006 18:12
Posts: 687
Location: Finland
matrich wrote:
Why HAVP can't create PID file?


Are you sure it's running as nobody? There are spaces before USER/GROUP in your paste, are they in config file too?

Quote:
ClamAV Library Scanner passed EICAR virus test (Eicar-Test-S
ignature) - why did he pass? EICAR is the test virus, that I try to download to test HAVP, but it passed him. And after that he write this string after each load. WHy?


"passing a test" is not the same as "passing a virus". It found a virus, test passed, scanner works. English is not always so simple. ;-)


Top
 Profile  
 
 Post subject: Re: error with PID file
PostPosted: 26 Dec 2007 14:03 
Offline

Joined: 24 Dec 2007 17:37
Posts: 10
hege wrote:
Are you sure it's running as nobody? There are spaces before USER/GROUP in your paste, are they in config file too?


yes, it is also in my havp config

#top

.....
736 nobody 1 8 0 42600K 1716K nanslp 0:01 0.00% havp
......

Quote:

"passing a test" is not the same as "passing a virus". It found a virus, test passed, scanner works. English is not always so simple. ;-)


But when I try to download file with virus, I've made it(file was downloaded).

Why this string displayed always, when I start HAVP?


Top
 Profile  
 
 Post subject: Re: error with PID file
PostPosted: 26 Dec 2007 14:33 
Offline
HAVP Developer

Joined: 27 Feb 2006 18:12
Posts: 687
Location: Finland
Maybe there is some old /var/run/havp/havp.pid with different permissions? Try to see and delete.

matrich wrote:
But when I try to download file with virus, I've made it(file was downloaded).


It's hard to say what's wrong. Did you look at access.log what it says?


Quote:
Why this string displayed always, when I start HAVP?


Don't you want to know the scanner works?


Top
 Profile  
 
 Post subject: Re: error with PID file
PostPosted: 26 Dec 2007 16:51 
Offline

Joined: 24 Dec 2007 17:37
Posts: 10
hege wrote:
Maybe there is some old /var/run/havp/havp.pid with different permissions? Try to see and delete.

there aren't any :(

Code:
#pwd
/var/run/havp
# ls -l
total 0

Quote:
It's hard to say what's wrong. Did you look at access.log what it says?


26/12/2007 16:37:44 127.0.0.1 GET 304 http://www.eicar.org/download/eicar_com.zip 252+0 OK


Quote:
Don't you want to know the scanner works?

sorry, i don't understand this phrase


Top
 Profile  
 
 Post subject: Re: error with PID file
PostPosted: 26 Dec 2007 17:07 
Offline
HAVP Developer

Joined: 27 Feb 2006 18:12
Posts: 687
Location: Finland
Quote:
26/12/2007 16:37:44 127.0.0.1 GET 304 http://www.eicar.org/download/eicar_com.zip 252+0 OK


It is coming from your browser cache. Empty it.


Top
 Profile  
 
 Post subject:
PostPosted: 26 Dec 2007 17:28 
Offline

Joined: 24 Dec 2007 17:37
Posts: 10
i empty my browser cache and squid cache, but file downloaded again and access.log don't displayed it.


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 7 posts ] 

All times are UTC + 2 hours [ DST ]


Who is online

Users browsing this forum: Google [Bot] and 2 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB® Forum Software © phpBB Group