Package: clamav-daemon Version: 1.4.3+dfsg-1 Followup-For: Bug #1042377 Hi,
Thanks for the bug report. I'm setting up an antivirus scanning server and I couldn't understand why clamav wasn't listening on the TCP socket. I preferred to leave the TCPSocket option in the clamd configuration file to make it more readable and I mask the "clamav-daemon.socket" unit. A hint about this behavior in the "/usr/share/doc/clamav-daemon/README.Debian.gz" file would be a plus. Regards. -- Package-specific info: --- configuration --- Checking configuration files in /etc/clamav Config file: clamd.conf ----------------------- AlertExceedsMax disabled CacheSize = "65536" PreludeEnable disabled PreludeAnalyzerName = "ClamAV" LogFile = "/var/log/clamav/clamav.log" LogFileUnlock disabled LogFileMaxSize = "9223372036854775807" LogTime = "yes" LogClean disabled LogSyslog disabled LogFacility = "LOG_LOCAL6" LogVerbose disabled LogRotate = "yes" ExtendedDetectionInfo = "yes" PidFile disabled TemporaryDirectory disabled DatabaseDirectory = "/var/lib/clamav" OfficialDatabaseOnly disabled FailIfCvdOlderThan disabled LocalSocket disabled LocalSocketGroup disabled LocalSocketMode disabled FixStaleSocket = "yes" TCPSocket = "3310" TCPAddr disabled MaxConnectionQueueLength = "30" StreamMaxLength = "52428800" StreamMinPort = "1024" StreamMaxPort = "2048" MaxThreads = "12" ReadTimeout = "180" CommandReadTimeout = "30" SendBufTimeout = "200" MaxQueue = "100" IdleTimeout = "30" ExcludePath disabled MaxDirectoryRecursion = "15" FollowDirectorySymlinks disabled FollowFileSymlinks disabled CrossFilesystems = "yes" SelfCheck = "3600" ConcurrentDatabaseReload = "yes" DisableCache disabled VirusEvent disabled ExitOnOOM disabled AllowAllMatchScan = "yes" Foreground disabled Debug disabled LeaveTemporaryFiles disabled GenerateMetadataJson disabled User = "clamav" Bytecode = "yes" BytecodeSecurity = "TrustSigned" BytecodeTimeout = "60000" BytecodeUnsigned disabled BytecodeMode = "Auto" DetectPUA disabled ExcludePUA disabled IncludePUA disabled ScanPE = "yes" ScanELF = "yes" ScanMail = "yes" ScanPartialMessages disabled PhishingSignatures = "yes" PhishingScanURLs = "yes" HeuristicAlerts = "yes" HeuristicScanPrecedence disabled StructuredDataDetection disabled StructuredMinCreditCardCount = "3" StructuredMinSSNCount = "3" StructuredSSNFormatNormal = "yes" StructuredSSNFormatStripped disabled ScanHTML = "yes" ScanOLE2 = "yes" AlertBrokenExecutables disabled AlertBrokenMedia disabled AlertEncrypted disabled StructuredCCOnly disabled AlertEncryptedArchive disabled AlertEncryptedDoc disabled AlertOLE2Macros disabled AlertPhishingSSLMismatch disabled AlertPhishingCloak disabled AlertPartitionIntersection disabled ScanPDF = "yes" ScanSWF = "yes" ScanXMLDOCS = "yes" ScanHWP3 = "yes" ScanOneNote = "yes" ScanArchive = "yes" ScanImage = "yes" ScanImageFuzzyHash = "yes" ForceToDisk disabled MaxScanTime = "120000" MaxScanSize = "104857600" MaxFileSize = "26214400" MaxRecursion = "16" MaxFiles = "10000" MaxEmbeddedPE = "10485760" MaxHTMLNormalize = "10485760" MaxHTMLNoTags = "2097152" MaxScriptNormalize = "5242880" MaxZipTypeRcg = "1048576" MaxPartitions = "50" MaxIconsPE = "100" MaxRecHWP3 = "16" PCREMatchLimit = "10000" PCRERecMatchLimit = "5000" PCREMaxFileSize = "26214400" OnAccessMountPath disabled OnAccessIncludePath disabled OnAccessExcludePath disabled OnAccessExcludeRootUID disabled OnAccessExcludeUID disabled OnAccessExcludeUname disabled OnAccessMaxFileSize = "5242880" OnAccessDisableDDD disabled OnAccessPrevention disabled OnAccessExtraScanning disabled OnAccessCurlTimeout = "5000" OnAccessMaxThreads = "5" OnAccessRetryAttempts disabled OnAccessDenyOnError disabled DevACOnly disabled DevACDepth disabled DevPerformance disabled DevLiblog disabled DisableCertCheck disabled AlgorithmicDetection = "yes" BlockMax disabled PhishingAlwaysBlockSSLMismatch disabled PhishingAlwaysBlockCloak disabled PartitionIntersection disabled OLE2BlockMacros disabled ArchiveBlockEncrypted disabled clamav-milter.conf not found Software settings ----------------- Version: 1.4.3 Optional features supported: MEMPOOL AUTOIT_EA06 ICONV RAR Platform information -------------------- uname: Linux 6.12.35+deb13-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.12.35-1 (2025-07-03) x86_64 OS: Linux, ARCH: x86_64, CPU: x86_64 Full OS version: Debian GNU/Linux 13 (trixie) zlib version: 1.3.1 (1.3.1), compile flags: a9 platform id: 0x0a21d5d508000000000e0200 Build information ----------------- GNU C: 14.2.0 (14.2.0) sizeof(void*) = 8 Engine flevel: 213, dconf: 213 -- System Information: Debian Release: 13.0 APT prefers testing-security APT policy: (500, 'testing-security'), (500, 'testing') Architecture: amd64 (x86_64) Kernel: Linux 6.12.35+deb13-amd64 (SMP w/1 CPU thread; PREEMPT) Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8), LANGUAGE not set Shell: /bin/sh linked to /usr/bin/dash Init: systemd (via /run/systemd/system) LSM: AppArmor: enabled Versions of packages clamav-daemon depends on: ii adduser 3.152 ii clamav-base 1.4.3+dfsg-1 ii clamav-freshclam [clamav-data] 1.4.3+dfsg-1 ii debconf [debconf-2.0] 1.5.91 ii dpkg 1.22.21 ii init-system-helpers 1.68 ii libc6 2.41-10 ii libclamav12 1.4.3+dfsg-1 ii libcurl4t64 8.14.1-2 ii libncurses6 6.5+20250216-2 ii libsystemd0 257.7-1 ii libtinfo6 6.5+20250216-2 ii procps 2:4.0.4-8 ii ucf 3.0052 ii zlib1g 1:1.3.dfsg+really1.3.1-1+b1 Versions of packages clamav-daemon recommends: ii clamdscan 1.4.3+dfsg-1 Versions of packages clamav-daemon suggests: ii apparmor 4.1.0-1 pn clamav-doc <none> pn daemon <none> ii libclamunrar 1.3.1-1 -- debconf information: * clamav-daemon/ScanArchive: true * clamav-daemon/debconf: true * clamav-daemon/ScanMail: true clamav-daemon/OnAccessMaxFileSize: 5M * clamav-daemon/TCPSocket: 3310 * clamav-daemon/MaxThreads: 12 clamav-daemon/ForceToDisk: false * clamav-daemon/MaxConnectionQueueLength: 30 clamav-daemon/MaxEmbeddedPE: 10M * clamav-daemon/SelfCheck: 3600 clamav-daemon/MaxHTMLNormalize: 10M clamav-daemon/FixStaleSocket: true * clamav-daemon/StreamMaxLength: 50 clamav-daemon/DisableCertCheck: false clamav-daemon/LocalSocketMode: 666 clamav-daemon/ScanSWF: true * clamav-daemon/LogRotate: true * clamav-daemon/AddGroups: * clamav-daemon/BytecodeTimeout: 60000 * clamav-daemon/FollowFileSymlinks: false clamav-daemon/LocalSocketGroup: clamav * clamav-daemon/MaxDirectoryRecursion: 15 * clamav-daemon/LogSyslog: false * clamav-daemon/TCPAddr: any * clamav-daemon/LogFile: /var/log/clamav/clamav.log * clamav-daemon/Bytecode: true clamav-daemon/MaxScriptNormalize: 5M * clamav-daemon/ReadTimeout: 180 * clamav-daemon/LogTime: true clamav-daemon/MaxHTMLNoTags: 2M * clamav-daemon/TcpOrLocal: TCP * clamav-daemon/BytecodeSecurity: TrustSigned clamav-daemon/FollowDirectorySymlinks: false clamav-daemon/AllowAllMatchScan: true * clamav-daemon/User: clamav clamav-daemon/LocalSocket: /var/run/clamav/clamd.ctl clamav-daemon/MaxZipTypeRcg: 1M