ClamAV process killed by OOM

1

Hi! Ipfire is installed, the clamav package is added . But the statute is STOPPED… Help please.

[root@ipfire ~]# /usr/bin/freshclam
ClamAV update process started at Mon Jul  5 03:21:52 2021
WARNING: Your ClamAV installation is OUTDATED!
WARNING: Local version: 0.103.2 Recommended version: 0.103.3
DON'T PANIC! Read https://www.clamav.net/documents/upgrading-clamav
WARNING: FreshClam previously received error code 429 from the ClamAV Content Delivery Network (CDN).
This means that you have been rate limited by the CDN.
 1. Run FreshClam no more than once an hour to check for updates.
    FreshClam should check DNS first to see if an update is needed.
 2. If you have more than 10 hosts on your network attempting to download,
    it is recommended that you set up a private mirror on your network using
    cvdupdate (https://pypi.org/project/cvdupdate/) to save bandwidth on the
    CDN and your own network.
 3. Please do not open a ticket asking for an exemption from the rate limit,
    it will not be granted.
WARNING: You are still on cool-down until after: 2021-07-05 07:22:18
[root@ipfire ~]#
2

Hello Dmitry,

the message says:

You will receive updates to this package with the next core update.

If clamav isn’t running, please check if you have enough memory and check the log files.

2 Likes
3

Thanks for the answer! Tell me where exactly to see why it is not running?

17:11:50 freshclam[2889]: bytecode.cvd updated (version: 333, sigs: 92, f-level: 63, builder: awillia2)
17:11:50 freshclam[2889]: Clamd was NOT notified: Can’t connect to clamd through /var/run/clamav/clamd: No such file or directory
4

The antivirus started, but turns off after a while, why?

ipfire login: /etc/rc.d/functions: line 438:       2365 Killed
5

You would find more detail in /var/log/messages.

1 Like
6

Does this mean that the memory has run out and the system has unloaded the loaded process?

Jul 5 22:49:26 ipfire kernel: Out of memory: Kill process 2416 (clamd) score 680 or sacrifice child

7

Yes! The error message just states this.

1 Like
8

Hi,

this sounds like your IPFire machine is running on an insufficient amount of RAM (a link to your Fireinfo profile would be helpful to confirm this :slight_smile: ), or ClamAV introduced a memory leak…

Thanks, and best regards,
Peter Müller

1 Like