On Wed, Jul 21, 2021 at 09:22:00AM +0200, Luca Bertoncello via Exim-users wrote:
> Am 21.07.2021 09:01, schrieb Evgeniy Berdnikov via Exim-users:
> > Compare output ot "lsof -n -a -U -u clamav +E" before and after hangup.
> > For all clamd child processes after hangup inspect what they are doing
> > with strace. Maybe you catch some significant difference with your
> > normally running host...
>
> I can't compare "before and after hangup", since it happens just short and I
> only get an advice from Logwatch the day after... :(
It's a time to search internet and learn how a trigger on event may be
constructed, for example, emergence of some record in mainlog.
Something like
tail -f /var/log/exim4/mainlog | fgrep --line-buffered PATTERN | while \
read line ; do echo "Found \"$line\"" ; beep -r3 ; \
lsof ... >> /tmp/lsof.out ; done
may be a starting point for manual operation.
--
Eugene Berdnikov
