Re: [clamav-users] Freshclam updates problem

2021-07-14 Thread Mark E. Mallett
Thanks. I haven't seen further error reports since around the time you
sent this.

-mm-  (but there's always tomorrow)



On Thu, Jul 15, 2021 at 02:32:39AM +, Micah Snyder (micasnyd) via 
clamav-users wrote:
> Hi Mark,
> 
> I think I know what happened on your system. The CDN (cloudflare) sometimes 
> sends cached responses for daily.cvd downloads, and presumably also does for 
> main.cvd.  If you got a cached main.cvd version 59 after attempting to 
> download version 60, then it would try a new download all over again the next 
> time you run freshclam. 
> 
> We just cleared the cache on cloudflare so hopefully this doesn't happen 
> again.  Clearing the cache hasn't been reliable, in my experience, so if we 
> get more reports of this we'll clear it again.  
> 
> Meanwhile, we're building a minor patch version for main.cvd and publish 
> version 61.  Combine that with the daily update for daily.cvd and we should 
> be back to normal tomorrow morning.
> 
> Regards,
> Micah
> 
> > -Original Message-
> > From: clamav-users  On Behalf Of
> > Mark E. Mallett
> > Sent: Wednesday, July 14, 2021 5:51 PM
> > To: ClamAV users ML 
> > Subject: Re: [clamav-users] Freshclam updates problem
> > 
> > On Wed, Jul 14, 2021 at 11:55:06PM +, Micah Snyder (micasnyd) via
> > clamav-users wrote:
> > 
> >   ...
> > >
> > >  But it seems 0.103 has a second bug where it will patiently wait
> > > until  it's at least 2 versions behind before it downloads the whole
> > > CVD  database. This behavior is supposed to happen when a private
> > > mirror  doesn't have the latest patch file yet, but wasn't supposed to
> > > happen  for a zero-byte patch file. So we clearly have 2 bugs to fix ASAP.
> > 
> > FWIW: 0.103.0 here; freshclam does say we're 1 diff behind. It fails to 
> > apply the
> > diff with the seek error mentioned:
> > 
> > ERROR: cdiff_apply: lseek(desc, -350, SEEK_END) failed
> > ERROR: downloadPatch: Can't apply patch
> > 
> > But then it *does* download the two new .cvd files. Or at least two new .cvd
> > files, I can't tell if they are the latest but I assume so.
> > Next time around, the process repeats and we do the big downloads again.
> > 
> > This may be what you meant but it doesn't sound like it. Just thought I'd 
> > pipe
> > up.
> > 
> > -mm-
> > 
> > PS when I first saw the daemon reports I tried clearing the data and running
> > freshclam by hand. Since it downloaded the two new .cvd files I assumed it 
> > had
> > self-corrected, so I did the same on all servers.
> > I was surprised on next daemon run to see the errors again, and tried a 
> > manual
> > run again and got the same errors.
> > 
> > I figured the problem was related to the new thing today; I was going to 
> > stop
> > all freshclams until I looked deeper or heard more. But it sounds like 
> > wait-and-
> > see for now.
> > 
> > ___
> > 
> > clamav-users mailing list
> > clamav-users@lists.clamav.net
> > https://lists.clamav.net/mailman/listinfo/clamav-users
> > 
> > 
> > Help us build a comprehensive ClamAV guide:
> > https://github.com/vrtadmin/clamav-faq
> > 
> > http://www.clamav.net/contact.html#ml
> 
> ___
> 
> clamav-users mailing list
> clamav-users@lists.clamav.net
> https://lists.clamav.net/mailman/listinfo/clamav-users
> 
> 
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
> 
> http://www.clamav.net/contact.html#ml
> 

-- 
Mark E. Mallett

___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


Re: [clamav-users] Freshclam updates problem

2021-07-14 Thread Micah Snyder (micasnyd) via clamav-users
Paul,

I think this is probably the same behavior you faced before, exacerbated by the 
fact that we used a zero-byte patch to force freshclam to download the whole 
cvd.  I have a pretty good idea on how to solve this in a future clamav 
version, but for now we're working to un-stick the stuck 0.103.1-0.103.3 
freshclam clients.  

All:

We created another new version of main.cvd (version 61) along with a small 
main-61.cdiff file.  We did some testing internally and then published it on 
the CDN.  I've confirmed that it's live now and that the main database update 
is working as expected again on versions 0.102.4 and 0.103.3.  

The daily database is still stuck for freshclam versions 0.103.1-0.103.3.  
We're building a new daily database & daily cdiff to un-stick this one. The 
build is expected to take about 4 hours.  After that, everyone should be able 
to update normally again.

Regards,
Micah

> -Original Message-
> From: clamav-users  On Behalf Of
> Paul Kosinski via clamav-users
> Sent: Wednesday, July 14, 2021 7:37 PM
> To: clamav-users@lists.clamav.net
> Cc: Paul Kosinski 
> Subject: Re: [clamav-users] Freshclam updates problem
> 
> On Wed, 14 Jul 2021 23:55:06 +
> "Micah Snyder \(micasnyd\) via clamav-users"  us...@lists.clamav.net> wrote:
> 
> > Hi Paul, all:
> >
> > We're triaging this issue now, also reported by a user on Discord.
> >
> > We issue a zero-byte CDIFF database patch file whenever we want
> Freshclam to download a whole CVD instead of doing the incremental/patch
> update.
> > Today we published a zero-byte patch file for both daily and main, as we've
> migrated about half of the daily signatures over to the main database.
> >
> > Unfortunately it appears we have a bug in 0.102 and 0.103 where Freshclam
> will complain loudly about the zero-byte CDIFF patch file. I suspect we didn't
> notice it before because, despite the error message, Freshclam will still do
> the right thing (at least in 0.102).
> >
> > But it seems 0.103 has a second bug where it will patiently wait until it's 
> > at
> least 2 versions behind before it downloads the whole CVD database. This
> behavior is supposed to happen when a private mirror doesn't have the
> latest patch file yet, but wasn't supposed to happen for a zero-byte patch
> file. So we clearly have 2 bugs to fix ASAP.
> >
> > The good news is, I believe that if we publish 1 more version of daily.cvd
> and main.cvd, we will see the 0.103 Freshclam clients all download the new
> daily & main and they'll be good again. I will work with our signature
> publishing team here to get an update for daily & main out as soon as we're
> able.
> >
> > I'm sorry about the bug everyone. Thank you for your patience!
> >
> > I will write again a soon as I have an update.
> >
> > -Micah
> 
> 
> More details on the new 'main' misbehavior. Don't know if it is helpful.
> 
> I'm running 0.103.3 on all 3 of my ClamAV installations. On one of the systems
> (where I have very detailed logging of freshclam), main was still at 59 (today
> at 7:43 AM EDT), and freshclam correctly downloaded daily 26231 over 26230.
> 
> Later on, from the same system, main was allegedly (DNS TXT) supposed to
> be at 60, and daily was supposed to be at 26232, but *both* failed to
> download at least 7 times (15:43 EDT through 21:43).
> 
> This may, of course, be essentially the same problem I had with Cloudflare's
> BOS (Anycast) POP a couple of years ago, which made me give up putting any
> more work into setting up my own mirror.
> 
> 
> 
> ___
> 
> clamav-users mailing list
> clamav-users@lists.clamav.net
> https://lists.clamav.net/mailman/listinfo/clamav-users
> 
> 
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
> 
> http://www.clamav.net/contact.html#ml

___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


Re: [clamav-users] Freshclam updates problem

2021-07-14 Thread Paul Kosinski via clamav-users
On Wed, 14 Jul 2021 23:55:06 +
"Micah Snyder \(micasnyd\) via clamav-users"  
wrote:

> Hi Paul, all:
> 
> We're triaging this issue now, also reported by a user on Discord.
> 
> We issue a zero-byte CDIFF database patch file whenever we want Freshclam to 
> download a whole CVD instead of doing the incremental/patch update. 
> Today we published a zero-byte patch file for both daily and main, as we've 
> migrated about half of the daily signatures over to the main database.
> 
> Unfortunately it appears we have a bug in 0.102 and 0.103 where Freshclam 
> will complain loudly about the zero-byte CDIFF patch file. I suspect we 
> didn't notice it before because, despite the error message, Freshclam will 
> still do the right thing (at least in 0.102). 
> 
> But it seems 0.103 has a second bug where it will patiently wait until it's 
> at least 2 versions behind before it downloads the whole CVD database. This 
> behavior is supposed to happen when a private mirror doesn't have the latest 
> patch file yet, but wasn't supposed to happen for a zero-byte patch file. So 
> we clearly have 2 bugs to fix ASAP.
> 
> The good news is, I believe that if we publish 1 more version of daily.cvd 
> and main.cvd, we will see the 0.103 Freshclam clients all download the new 
> daily & main and they'll be good again. I will work with our signature 
> publishing team here to get an update for daily & main out as soon as we're 
> able.
> 
> I'm sorry about the bug everyone. Thank you for your patience!
> 
> I will write again a soon as I have an update.
> 
> -Micah


More details on the new 'main' misbehavior. Don't know if it is helpful.

I'm running 0.103.3 on all 3 of my ClamAV installations. On one of the systems 
(where I have very detailed logging of freshclam), main was still at 59 (today 
at 7:43 AM EDT), and freshclam correctly downloaded daily 26231 over 26230. 

Later on, from the same system, main was allegedly (DNS TXT) supposed to be at 
60, and daily was supposed to be at 26232, but *both* failed to download at 
least 7 times (15:43 EDT through 21:43).

This may, of course, be essentially the same problem I had with Cloudflare's 
BOS (Anycast) POP a couple of years ago, which made me give up putting any more 
work into setting up my own mirror.



___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


Re: [clamav-users] Freshclam updates problem

2021-07-14 Thread Micah Snyder (micasnyd) via clamav-users
Hi Mark,

I think I know what happened on your system. The CDN (cloudflare) sometimes 
sends cached responses for daily.cvd downloads, and presumably also does for 
main.cvd.  If you got a cached main.cvd version 59 after attempting to download 
version 60, then it would try a new download all over again the next time you 
run freshclam. 

We just cleared the cache on cloudflare so hopefully this doesn't happen again. 
 Clearing the cache hasn't been reliable, in my experience, so if we get more 
reports of this we'll clear it again.  

Meanwhile, we're building a minor patch version for main.cvd and publish 
version 61.  Combine that with the daily update for daily.cvd and we should be 
back to normal tomorrow morning.

Regards,
Micah

> -Original Message-
> From: clamav-users  On Behalf Of
> Mark E. Mallett
> Sent: Wednesday, July 14, 2021 5:51 PM
> To: ClamAV users ML 
> Subject: Re: [clamav-users] Freshclam updates problem
> 
> On Wed, Jul 14, 2021 at 11:55:06PM +, Micah Snyder (micasnyd) via
> clamav-users wrote:
> 
>   ...
> >
> >  But it seems 0.103 has a second bug where it will patiently wait
> > until  it's at least 2 versions behind before it downloads the whole
> > CVD  database. This behavior is supposed to happen when a private
> > mirror  doesn't have the latest patch file yet, but wasn't supposed to
> > happen  for a zero-byte patch file. So we clearly have 2 bugs to fix ASAP.
> 
> FWIW: 0.103.0 here; freshclam does say we're 1 diff behind. It fails to apply 
> the
> diff with the seek error mentioned:
> 
> ERROR: cdiff_apply: lseek(desc, -350, SEEK_END) failed
> ERROR: downloadPatch: Can't apply patch
> 
> But then it *does* download the two new .cvd files. Or at least two new .cvd
> files, I can't tell if they are the latest but I assume so.
> Next time around, the process repeats and we do the big downloads again.
> 
> This may be what you meant but it doesn't sound like it. Just thought I'd pipe
> up.
> 
> -mm-
> 
> PS when I first saw the daemon reports I tried clearing the data and running
> freshclam by hand. Since it downloaded the two new .cvd files I assumed it had
> self-corrected, so I did the same on all servers.
> I was surprised on next daemon run to see the errors again, and tried a manual
> run again and got the same errors.
> 
> I figured the problem was related to the new thing today; I was going to stop
> all freshclams until I looked deeper or heard more. But it sounds like 
> wait-and-
> see for now.
> 
> ___
> 
> clamav-users mailing list
> clamav-users@lists.clamav.net
> https://lists.clamav.net/mailman/listinfo/clamav-users
> 
> 
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
> 
> http://www.clamav.net/contact.html#ml

___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


Re: [clamav-users] Freshclam updates problem

2021-07-14 Thread Mark E. Mallett
On Wed, Jul 14, 2021 at 11:55:06PM +, Micah Snyder (micasnyd) via 
clamav-users wrote:

  ...
>  
>  But it seems 0.103 has a second bug where it will patiently wait until
>  it's at least 2 versions behind before it downloads the whole CVD
>  database. This behavior is supposed to happen when a private mirror
>  doesn't have the latest patch file yet, but wasn't supposed to happen
>  for a zero-byte patch file. So we clearly have 2 bugs to fix ASAP.

FWIW: 0.103.0 here; freshclam does say we're 1 diff behind. It fails
to apply the diff with the seek error mentioned:

ERROR: cdiff_apply: lseek(desc, -350, SEEK_END) failed
ERROR: downloadPatch: Can't apply patch

But then it *does* download the two new .cvd files. Or at least two
new .cvd files, I can't tell if they are the latest but I assume so.
Next time around, the process repeats and we do the big downloads again.

This may be what you meant but it doesn't sound like it. Just thought
I'd pipe up. 

-mm-

PS when I first saw the daemon reports I tried clearing the data and
running freshclam by hand. Since it downloaded the two new .cvd files
I assumed it had self-corrected, so I did the same on all servers.
I was surprised on next daemon run to see the errors again, and tried
a manual run again and got the same errors.

I figured the problem was related to the new thing today; I was going
to stop all freshclams until I looked deeper or heard more. But it
sounds like wait-and-see for now.

___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


Re: [clamav-users] Freshclam updates problem

2021-07-14 Thread Micah Snyder (micasnyd) via clamav-users
Hi Robert,

The zero-byte cdiff update was intentional. For more details, see: 
https://lists.clamav.net/pipermail/clamav-users/2021-July/011494.html
The database back-end folks did the right thing... This error message is my 
fault and is a Freshclam bug.  

Thankfully this bug should just be a loud error message but should not cause 
Freshclam to fail. Freshclam should begin to behave normally again after we 
publish the next database version and it downloads that.
Please see my message from just a bit ago for more details: 
https://lists.clamav.net/pipermail/clamav-users/2021-July/011499.html

Regards,
Micah

> -Original Message-
> From: clamav-users  On Behalf Of
> Robert M. Stockmann via clamav-users
> Sent: Wednesday, July 14, 2021 5:00 PM
> To: Paul Netpresto via clamav-users 
> Cc: Robert M. Stockmann 
> Subject: Re: [clamav-users] Freshclam updates problem
> 
> On Wed, 14 Jul 2021, Paul Netpresto via clamav-users wrote:
> 
> > Date: Wed, 14 Jul 2021 23:30:28 +0100
> > From: Paul Netpresto via clamav-users 
> > To: clamav-users@lists.clamav.net
> > Cc: Paul Netpresto 
> > Subject: [clamav-users] Freshclam updates problem
> >
> > Hello
> >
> > This has started occurring on all our 103.2 systems.  Is this related
> > to the " New Main & Daily CVD's are incoming" email from Joel earlier
> > today
> >
> > ERROR: cdiff_apply: lseek(desc, -350, SEEK_END) failed
> > ERROR: downloadPatch: Can't apply patch The database server doesn't
> > have the latest patch for the daily database (versio n 26232). The
> > server will likely have updated if you check again in a few hours.
> > main database available for update (local version: 59, remote version:
> > 60)
> > ERROR: cdiff_apply: lseek(desc, -350, SEEK_END) failed
> > ERROR: downloadPatch: Can't apply patch The database server doesn't
> > have the latest patch for the main database (version   60). The
> > server will likely have updated if you check again in a few hours.
> > bytecode.cld database is up-to-date (version: 333, sigs: 92, f-level:
> > 63, builde
> > r: awillia2)
> >
> 
> I get this, which somehow includes version numbers :
> 
> [hubble:root]:(~)# freshclam
> ClamAV update process started at Thu Jul 15 01:55:51 2021 daily database
> available for update (local version: 26231, remote version: 26232) Current
> database is 1 version behind.
> Downloading database patch # 26232...
> ERROR: cdiff_apply: lseek(desc, -350, SEEK_END) failed
> ERROR: downloadPatch: Can't apply patch
> The database server doesn't have the latest patch for the daily database
> (version 26232). The server will likely have updated if you check again in a 
> few
> hours.
> main database available for update (local version: 59, remote version: 60)
> Current database is 1 version behind.
> Downloading database patch # 60...
> ERROR: cdiff_apply: lseek(desc, -350, SEEK_END) failed
> ERROR: downloadPatch: Can't apply patch
> The database server doesn't have the latest patch for the main database
> (version 60). The server will likely have updated if you check again in a few
> hours.
> bytecode.cvd database is up-to-date (version: 333, sigs: 92, f-level: 63, 
> builder:
> awillia2) [hubble:root]:(~)#
> 
> Someone on the database distribution backend for clamav still has some work
> todo
> >
> > ___
> >
> > clamav-users mailing list
> > clamav-users@lists.clamav.net
> > https://lists.clamav.net/mailman/listinfo/clamav-users
> >
> >
> > Help us build a comprehensive ClamAV guide:
> > https://github.com/vrtadmin/clamav-faq
> >
> > http://www.clamav.net/contact.html#ml
> >
> 
> --
> Robert M. Stockmann - RHCE
> Network Engineer - UNIX/Linux Specialist crashrecovery.org  st...@stokkie.net
> 
> 
> ___
> 
> clamav-users mailing list
> clamav-users@lists.clamav.net
> https://lists.clamav.net/mailman/listinfo/clamav-users
> 
> 
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
> 
> http://www.clamav.net/contact.html#ml

___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


Re: [clamav-users] Freshclam updates problem

2021-07-14 Thread Robert M. Stockmann via clamav-users
On Wed, 14 Jul 2021, Paul Netpresto via clamav-users wrote:

> Date: Wed, 14 Jul 2021 23:30:28 +0100
> From: Paul Netpresto via clamav-users 
> To: clamav-users@lists.clamav.net
> Cc: Paul Netpresto 
> Subject: [clamav-users] Freshclam updates problem
> 
> Hello
> 
> This has started occurring on all our 103.2 systems.  Is this related to 
> the " New Main & Daily CVD's are incoming" email from Joel earlier today
> 
> ERROR: cdiff_apply: lseek(desc, -350, SEEK_END) failed
> ERROR: downloadPatch: Can't apply patch
> The database server doesn't have the latest patch for the daily database 
> (versio
> n 26232). The server will likely have updated if you check again in a 
> few hours.
> main database available for update (local version: 59, remote version: 60)
> ERROR: cdiff_apply: lseek(desc, -350, SEEK_END) failed
> ERROR: downloadPatch: Can't apply patch
> The database server doesn't have the latest patch for the main database 
> (version
>   60). The server will likely have updated if you check again in a few 
> hours.
> bytecode.cld database is up-to-date (version: 333, sigs: 92, f-level: 
> 63, builde
> r: awillia2)
> 

I get this, which somehow includes version numbers :

[hubble:root]:(~)# freshclam 
ClamAV update process started at Thu Jul 15 01:55:51 2021
daily database available for update (local version: 26231, remote version: 
26232)
Current database is 1 version behind.
Downloading database patch # 26232...
ERROR: cdiff_apply: lseek(desc, -350, SEEK_END) failed
ERROR: downloadPatch: Can't apply patch
The database server doesn't have the latest patch for the daily database 
(version 26232). The server will likely have updated if you check again in a 
few hours.
main database available for update (local version: 59, remote version: 60)
Current database is 1 version behind.
Downloading database patch # 60...
ERROR: cdiff_apply: lseek(desc, -350, SEEK_END) failed
ERROR: downloadPatch: Can't apply patch
The database server doesn't have the latest patch for the main database 
(version 60). The server will likely have updated if you check again in a few 
hours.
bytecode.cvd database is up-to-date (version: 333, sigs: 92, f-level: 63, 
builder: awillia2)
[hubble:root]:(~)# 

Someone on the database distribution backend for clamav
still has some work todo
> 
> ___
> 
> clamav-users mailing list
> clamav-users@lists.clamav.net
> https://lists.clamav.net/mailman/listinfo/clamav-users
> 
> 
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
> 
> http://www.clamav.net/contact.html#ml
> 

-- 
Robert M. Stockmann - RHCE
Network Engineer - UNIX/Linux Specialist
crashrecovery.org  st...@stokkie.net


___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


Re: [clamav-users] Freshclam updates problem

2021-07-14 Thread Micah Snyder (micasnyd) via clamav-users
Hi Paul, all:

We're triaging this issue now, also reported by a user on Discord.

We issue a zero-byte CDIFF database patch file whenever we want Freshclam to 
download a whole CVD instead of doing the incremental/patch update. 
Today we published a zero-byte patch file for both daily and main, as we've 
migrated about half of the daily signatures over to the main database.

Unfortunately it appears we have a bug in 0.102 and 0.103 where Freshclam will 
complain loudly about the zero-byte CDIFF patch file. I suspect we didn't 
notice it before because, despite the error message, Freshclam will still do 
the right thing (at least in 0.102). 

But it seems 0.103 has a second bug where it will patiently wait until it's at 
least 2 versions behind before it downloads the whole CVD database. This 
behavior is supposed to happen when a private mirror doesn't have the latest 
patch file yet, but wasn't supposed to happen for a zero-byte patch file. So we 
clearly have 2 bugs to fix ASAP.

The good news is, I believe that if we publish 1 more version of daily.cvd and 
main.cvd, we will see the 0.103 Freshclam clients all download the new daily & 
main and they'll be good again. I will work with our signature publishing team 
here to get an update for daily & main out as soon as we're able.

I'm sorry about the bug everyone. Thank you for your patience!

I will write again a soon as I have an update.

-Micah

> -Original Message-
> From: clamav-users  On Behalf Of
> Paul Netpresto via clamav-users
> Sent: Wednesday, July 14, 2021 3:30 PM
> To: clamav-users@lists.clamav.net
> Cc: Paul Netpresto 
> Subject: [clamav-users] Freshclam updates problem
> 
> Hello
> 
> This has started occurring on all our 103.2 systems.  Is this related to the 
> " New
> Main & Daily CVD's are incoming" email from Joel earlier today
> 
> ERROR: cdiff_apply: lseek(desc, -350, SEEK_END) failed
> ERROR: downloadPatch: Can't apply patch
> The database server doesn't have the latest patch for the daily database 
> (versio
> n 26232). The server will likely have updated if you check again in a few 
> hours.
> main database available for update (local version: 59, remote version: 60)
> ERROR: cdiff_apply: lseek(desc, -350, SEEK_END) failed
> ERROR: downloadPatch: Can't apply patch
> The database server doesn't have the latest patch for the main database
> (version
>   60). The server will likely have updated if you check again in a few hours.
> bytecode.cld database is up-to-date (version: 333, sigs: 92, f-level:
> 63, builde
> r: awillia2)
> 
> 
> ___
> 
> clamav-users mailing list
> clamav-users@lists.clamav.net
> https://lists.clamav.net/mailman/listinfo/clamav-users
> 
> 
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
> 
> http://www.clamav.net/contact.html#ml

___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


[clamav-users] Freshclam updates problem

2021-07-14 Thread Paul Netpresto via clamav-users

Hello

This has started occurring on all our 103.2 systems.  Is this related to 
the " New Main & Daily CVD's are incoming" email from Joel earlier today


ERROR: cdiff_apply: lseek(desc, -350, SEEK_END) failed
ERROR: downloadPatch: Can't apply patch
The database server doesn't have the latest patch for the daily database 
(versio
n 26232). The server will likely have updated if you check again in a 
few hours.

main database available for update (local version: 59, remote version: 60)
ERROR: cdiff_apply: lseek(desc, -350, SEEK_END) failed
ERROR: downloadPatch: Can't apply patch
The database server doesn't have the latest patch for the main database 
(version
 60). The server will likely have updated if you check again in a few 
hours.
bytecode.cld database is up-to-date (version: 333, sigs: 92, f-level: 
63, builde

r: awillia2)


___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


Re: [clamav-users] The "=" sign in freshclam options (---datadir= as an example) is mandatory?

2021-07-14 Thread G.W. Haywood via clamav-users

Hi there,

On Wed, 14 Jul 2021, Michael Wang wrote:


I discovered that the "=" sign in freshclam option is mandatory. For
example:

freshclam --datadir=c:\temp\database (with =)
and
freshclam --datadir c:\temp\database (without =)

are different. In the latter, the option "--datadir c:\temp\database" is
ignored as if it were not specified.

On the other hand, the "=" in clamscan option is optional, i.e.

clamscan --log=c:\tmp\my.log
and
clamscan --log c:\tmp\my.log

are equivalent.

I would like to get a confirmation that this is true, and secondly to get
an opinion if this is a bug, as far as I know, the = in option should be
optional.


If an option takes an argument, and it has long and short forms (for
example -l and --log) then it's more or less a Unix custom for the
short form of the option to require that there is no following '=',
and for the long form to require one.  As you say, the clamscan and
freshclam 'man' pages show that, but it seems that the conformance of
the executables to the custom is patchy.

I've confirmed that clamscan on Linux behaves in the same way you have
described for Windows.  Because of the changes currently taking place
in the main and daily databases I haven't run freshclam to test it (in
any case I very rarely run freshclam manually) but I'd be surprised if
it didn't also behave in the same way.  Most of the code is common (in
.../shared/optparser.c) to both operating systems.  Thesedays, rather
than re-invent that particular wheel I'd use a library, but I guess at
the time this was written (getting on for twenty years ago) the author
had his reasons.

I think you've found two faults, not one.  Unless the man page says
that it will ignore a malformed option, freshclam should not do that;
it should issue an error message and quit with no other action.  And
the '=' should be required, not optional, in the option's long form.
I'd recommend reporting the faults via the ClamAV Bugzilla, if they
have not already been reported.

Full marks for studying the man pages carefully and checking that the
binaries behave as described.

--

73,
Ged.

___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


[clamav-users] The "=" sign in freshclam options (---datadir= as an example) is mandatory?

2021-07-14 Thread Michael Wang
I discovered that the "=" sign in freshclam option is mandatory. For
example:

freshclam --datadir=c:\temp\database (with =)
and
freshclam --datadir c:\temp\database (without =)

are different. In the latter, the option "--datadir c:\temp\database" is
ignored as if it were not specified.

On the other hand, the "=" in clamscan option is optional, i.e.

clamscan --log=c:\tmp\my.log
and
clamscan --log c:\tmp\my.log

are equivalent.

I would like to get a confirmation that this is true, and secondly to get
an opinion if this is a bug, as far as I know, the = in option should be
optional.

___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


Re: [clamav-users] Qnap TS-259Pro+

2021-07-14 Thread Matus UHLAR - fantomas

On 13.07.21 19:47, Eero Volotinen wrote:

You probably need to buy newer version of qnap nas
or compile clamav from sources.


that apparently won't help - TS-259Pro+ seems to only have 1GB of RAM, where
clamav needs more (about 1.5GB on my machine)


On Tue 13. Jul 2021 at 19.41, Raymond Ng via clamav-users <
clamav-users@lists.clamav.net> wrote:

My Qnap NAS suddenly stop updating Virus signature since March.
It had a manual update but I can’t find where to download the latest
signature file at Clamav home page.
Kindly help to direct where I could download the latest signature so I
could manual update the signature.
Ive check on the Qnap Community site that there is a new version of Clamav
but it’s not compatible with my model.



this was heavily discussed and explained here and in the QNAP forum too.
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
I feel like I'm diagonally parked in a parallel universe.

___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml