HTTP Anti-Virus Proxy
http://havp.hege.li/forum/

error with PID file
http://havp.hege.li/forum/viewtopic.php?f=3&t=322		 Page 1 of 1
Author:  matrich [ 26 Dec 2007 10:10 ]
Post subject:  error with PID file
after starting HAVP in log file I have
Code:
 --- Initializing ClamAV Library Scanner
26/12/2007 09:40:52 ClamAV: Using database directory: /var/db/clamav
26/12/2007 09:40:56 ClamAV: Loaded 181057 signatures (engine 0.91.2)
26/12/2007 09:40:56 ClamAV Library Scanner passed EICAR virus test (Eicar-Test-S
ignature)
26/12/2007 09:40:56 --- All scanners initialized
26/12/2007 09:40:56 Can not write to PIDFILE!
26/12/2007 09:40:56 Process ID: 736
 


Code:
cd /var/run
ls -l
...
drwxrwxr-x  2 nobody  nobody    512 Dec 24 16:19 havp
...


havp.config
Code:
 USER nobody
 GROUP nobody


#
# Process id (PID) of the main HAVP process is written to this file.
# Be sure that it is writeable by the user under which HAVP is running.
# /etc/init.d/havp script requires this to work.
#
# Default:
# PIDFILE /var/run/havp/havp.pid


Why HAVP can't create PID file?

ClamAV Library Scanner passed EICAR virus test (Eicar-Test-S
ignature) - why did he pass? EICAR is the test virus, that I try to download to test HAVP, but it passed him. And after that he write this string after each load. WHy?
Author:  hege [ 26 Dec 2007 13:11 ]
Post subject:  Re: error with PID file
matrich wrote:
Why HAVP can't create PID file?


Are you sure it's running as nobody? There are spaces before USER/GROUP in your paste, are they in config file too?

Quote:
ClamAV Library Scanner passed EICAR virus test (Eicar-Test-S
ignature) - why did he pass? EICAR is the test virus, that I try to download to test HAVP, but it passed him. And after that he write this string after each load. WHy?


"passing a test" is not the same as "passing a virus". It found a virus, test passed, scanner works. English is not always so simple. ;-)
Author:  matrich [ 26 Dec 2007 14:03 ]
Post subject:  Re: error with PID file
hege wrote:
Are you sure it's running as nobody? There are spaces before USER/GROUP in your paste, are they in config file too?


yes, it is also in my havp config

#top

.....
736 nobody 1 8 0 42600K 1716K nanslp 0:01 0.00% havp
......

Quote:

"passing a test" is not the same as "passing a virus". It found a virus, test passed, scanner works. English is not always so simple. ;-)


But when I try to download file with virus, I've made it(file was downloaded).

Why this string displayed always, when I start HAVP?
Author:  hege [ 26 Dec 2007 14:33 ]
Post subject:  Re: error with PID file
Maybe there is some old /var/run/havp/havp.pid with different permissions? Try to see and delete.

matrich wrote:
But when I try to download file with virus, I've made it(file was downloaded).


It's hard to say what's wrong. Did you look at access.log what it says?


Quote:
Why this string displayed always, when I start HAVP?


Don't you want to know the scanner works?
Author:  matrich [ 26 Dec 2007 16:51 ]
Post subject:  Re: error with PID file
hege wrote:
Maybe there is some old /var/run/havp/havp.pid with different permissions? Try to see and delete.

there aren't any :(

Code:
#pwd
/var/run/havp
# ls -l
total 0

Quote:
It's hard to say what's wrong. Did you look at access.log what it says?


26/12/2007 16:37:44 127.0.0.1 GET 304 http://www.eicar.org/download/eicar_com.zip 252+0 OK


Quote:
Don't you want to know the scanner works?

sorry, i don't understand this phrase
Author:  hege [ 26 Dec 2007 17:07 ]
Post subject:  Re: error with PID file
Quote:
26/12/2007 16:37:44 127.0.0.1 GET 304 http://www.eicar.org/download/eicar_com.zip 252+0 OK


It is coming from your browser cache. Empty it.
Author:  matrich [ 26 Dec 2007 17:28 ]
Post subject: 
i empty my browser cache and squid cache, but file downloaded again and access.log don't displayed it.
Page 1 of 1 All times are UTC + 2 hours [ DST ]
Powered by phpBB® Forum Software © phpBB Group
https://www.phpbb.com/