Hello,
I'm running clamav (currently version 0.85) on two separate servers and my
home notebook and recently noticed odd behavior when running freshclam.
While on one server and my notebook it always both displays to the console
and logs information about both main.cvd and daily.cvd (i.e. whether the
were updated or are up to date), on the other server it only displays that
information about main.cvd, though it does log information about both
main.cvd and daily.cvd to the log and does update daily.cvd when
appropriate. For example, here is the output from the first, "normally"
operating server:
root ~ # /usr/local/bin/freshclam
ClamAV update process started at Sun May 15 04:49:38 2005
main.cvd is up to date (version: 31, sigs: 33079, f-level: 4, builder:
tkojm)
daily.cvd is up to date (version: 878, sigs: 1281, f-level: 5, builder:
ccordes)
root ~ #
while the other server, running the same version of clamav with identical
configuration files (as verified by md5sums), displays only:
[EMAIL PROTECTED]:~# /usr/local/bin/freshclam
ClamAV update process started at Sun May 15 04:50:39 2005
main.cvd is up to date (version: 31, sigs: 33079, f-level: 4, builder:
tkojm)
[EMAIL PROTECTED]:~#
The log files for both, however, are identical (except for times, of
course):
[EMAIL PROTECTED]:~# tail -n 4 /var/log/freshclam.log
--------------------------------------
ClamAV update process started at Sun May 15 04:50:39 2005
main.cvd is up to date (version: 31, sigs: 33079, f-level: 4, builder:
tkojm)
daily.cvd is up to date (version: 878, sigs: 1281, f-level: 5, builder:
ccordes)
Both installations were compiled from source using identical config
options (./configure --sysconfdir=/etc) and with the default
optimizations. I did "grep -r 'up to date'" in the source directory and
find only four occurences, all in freshclam/manager.c, that consisted of
two places where this message is first written to stdout then in the
immediate next line apparently logged, so I am at a loss as to how the
daily.cvd messages could be logged but not display to the console. I'm no
C programmer, though, so perhaps someone who is has a better idea as to
what's going on here?
The first ("normal") server is a linux virtual machine running under UML
on a box with dual Intel Xeon processors. My notebook has a pentium3
processor, and the server where freshclam behaves oddly is an old box with
an amd k6-3 processor. The UML server is running a linux 2.4.26 based
kernel, while my notebook and the other server currently run linux
2.6.11-7 kernels. If you need any other information let me know.
Thanks,
Zibeli
_______________________________________________
http://lurker.clamav.net/list/clamav-users.html
