I'm using clamdownloader.pl... I have a local mirror and recently the serious up tick in updates per day has caused me to have to D/L once an hour. I'm using db.us.clamav.net (db.us.big.clamav.net RR on 17 IPs) as my mirror.
I've discovered that the updated files are getting pushed to them at about 35-45 minutes after the hour, nearly every hour. Some though multiples per hour. So, I reset my mirrors.dat before any update and for my instances to load from my mirror. I'm truly flabbergasted at the sheer number of updates recently. Is it *REALLY* that bad recently? BTW, your diff is showing from Dec 25th. I've found that if one of the files is not yet on the mirror that clamav reports the first one it needed to get, versus the actual missing file. On Mon, 2013-01-07 at 12:50 -0800, Al Varnell wrote: > I'm sure this is due to the large increases over the past month or so of new > signatures being posted, but several ClamXav users are reporting seeing > update sessions similar to the following on a frequent basis. > > > Fri Dec 28 13:12:19 2012 -> ClamAV update process started at Fri Dec 28 > > 13:12:19 2012 > > Fri Dec 28 13:12:19 2012 -> main.cvd is up to date (version: 54, sigs: > > 1044387, f-level: 60, builder: sven) > > Fri Dec 28 13:12:20 2012 -> WARNING: getfile: daily-16088.cdiff not found on > > remote server (IP: 194.8.197.22) > > Fri Dec 28 13:12:20 2012 -> WARNING: getpatch: Can't download > > daily-16088.cdiff from db.us.clamav.net > > Fri Dec 28 13:12:20 2012 -> WARNING: getfile: daily-16088.cdiff not found on > > remote server (IP: 78.46.84.244) > > Fri Dec 28 13:12:20 2012 -> WARNING: getpatch: Can't download > > daily-16088.cdiff from db.us.clamav.net > > Fri Dec 28 13:12:21 2012 -> WARNING: getfile: daily-16088.cdiff not found on > > remote server (IP: 128.177.8.248) > > Fri Dec 28 13:12:21 2012 -> WARNING: getpatch: Can't download > > daily-16088.cdiff from db.us.clamav.net > > Fri Dec 28 13:12:21 2012 -> WARNING: Incremental update failed, trying to > > download daily.cvd > > Fri Dec 28 13:12:30 2012 -> Downloading daily.cvd [100%] > > Fri Dec 28 13:12:32 2012 -> daily.cvd updated (version: 16171, sigs: 440336, > > f-level: 63, builder: guitar) > > Fri Dec 28 13:12:32 2012 -> bytecode.cld is up to date (version: 209, sigs: > > 40, f-level: 63, builder: neo) > > Fri Dec 28 13:12:34 2012 -> Database updated (1484763 signatures) from > > db.us.clamav.net (IP: 194.186.47.19) > > So it would appear that you may be seeing a major impact on your mirror > network caused by the necessity to often download the entire daily.cvd. Not > a huge deal for the user (15 minutes to update in the above example), but I > thought you might want to know about it. > > The only question I have is what is the limit on the number or size of the > .cdiff files? It would appear to be running at less than a days worth now. > > > -Al- > -- greg folkert - systems administration and support web: donor.com email: [email protected] phone: 877-751-3300 x416 direct: 616-328-6449 (direct dial and fax) "You have to make it happen." -- Denis Diderot _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
