Re: [exim] av_scanner is broken suddenly?

Startseite
Nachricht löschen
Nachricht beantworten
Autor: Victor Sudakov
Datum:  
To: exim-users
Betreff: Re: [exim] av_scanner is broken suddenly?
Evgeniy Berdnikov via Exim-users wrote:
> On Tue, Dec 29, 2020 at 06:03:10PM +0700, Victor Sudakov via Exim-users wrote:
> > Evgeniy Berdnikov via Exim-users wrote:
> > > On Tue, Dec 29, 2020 at 10:20:51AM +0700, Victor Sudakov via Exim-users wrote:
> > > > The packet dump is available at http://admin.sibptus.ru/~vas/2.pcap
> > > > You can see from it that exim's host opens a TCP connection to the
> > > > clamav host, the clamav host replies with SYN+ACK, but the exim host sends a TCP RST
> > > > immediately. Why could that happen?
> > >
> > > Normally tcp connection initiator should respond with ACK to SYN+ACK.
> >
> > Have you looked at the actual packet dump? I mean, don't trust my word.
>
> Yes, I have. And have you looked at packet time stamps?
> IMHO, 3-5 us time interval between SYN-ACK and RST is
> too low for userspace responce.


Well, the whole story is happening within one hypervisor (bhyve) so
network delays can be very low.

>
> However, get strace as Jeremy suggested.
> I expect ECONNREFUSED on connect().


Is this ktrace informative https://termbin.com/zjsv ?

--
Victor Sudakov, VAS4-RIPE, VAS47-RIPN
2:5005/49@fidonet http://vas.tomsk.ru/