On Fri, 19 Nov 2004 at 20:09:06 -0600, Damian Menscher wrote:
Clamd didn't find the EICAR pattern. Your virus database(s) could be borked!
Eicar-Test-Signature was moved to daily.cvd to let us update it later (because currently it causes FPs with some files), resulting in a short absence.
I'm confused. If you have to change it, why not change main.cvd once, rather than changing main.cvd to remove it then again to put it back? Are we expected to check for updates to the daily.cvd more often than for updates to main.cvd?
I guess it goes without saying (but I will anyway) that changing things in a way that doesn't cause clamdwatch.pl to fail would be greatly appreciated. (Imagine lots of scared little sysadmins trying to figure out what to do when they get emails about ClamAV being "borked". ;)
Damian Menscher -- -=#| Physics Grad Student & SysAdmin @ U Illinois Urbana-Champaign |#=- -=#| 488 LLP, 1110 W. Green St, Urbana, IL 61801 Ofc:(217)333-0038 |#=- -=#| 4602 Beckman, VMIL/MS, Imaging Technology Group:(217)244-3074 |#=- -=#| <[EMAIL PROTECTED]> www.uiuc.edu/~menscher/ Fax:(217)333-9819 |#=- -=#| The above opinions are not necessarily those of my employers. |#=- _______________________________________________ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
