Re: [clamav-users] freshclam error - ^downloadFile: Unexpected response (502) ...Can't Download CVD

[Micah Snyder (micasnyd) via clamav-users]

An HTTP 502 error is a "bad gateway error" or "proxy error". I suspect either 
the proxy settings are misconfigured, or the proxy settings in freshclam.conf 
are misconfigured.

Ganesh, did you say you're using a proxy and a private mirror?  What sort of 
proxy are you using?  Maybe if you could share some (anonymized) configuration 
options (at least the freshclam.conf options) someone can spot what is wrong.

Regards,
Micah

Micah Snyder
ClamAV Development
Talos
Cisco Systems, Inc.

From: clamav-users  on behalf of Ganesh 
Kachare, Vodafone (External) via clamav-users 
Sent: Monday, August 8, 2022 3:51 AM
To: ClamAV users ML 
Cc: Ganesh Kachare, Vodafone (External) 
Subject: [clamav-users] freshclam error - ^downloadFile: Unexpected response 
(502) ...Can't Download CVD


Hi Team,



I am trying to download the clamav updates from private local mirror on my 
custom clamav alpine docker image and  I am keep getting ^downloadFile: 
Unexpected response (502) error from freshclam.



Its not able to download main.cvd, daily.cvd, bytecode.cvd and eventually my 
pod fails after maximum retry. I did tried increasing timeouts and disabling it 
in freshclam.conf file but it did not work.



I have validated my proxy and private mirror server and they are able to 
connect with alpine clamav docker image.



Does anyone face similar issue.. I am using clamav and freshclam v0.104.3-r0 on 
alpine 3.16



Logs ---



Host: localmirror.clamavdatabase.com

user-agent: ClamAV/0.104.3 (OS: Linux, ARCH: x86_64, CPU: x86_64, UUID: 
a37614fe-f1f8-4c49-a7a5-e0330ea8b945)

accept: */*

connection: close



* old SSL session ID is stale, removing

< HTTP/2 502

< content-type: text/html; charset=UTF-8

< referrer-policy: no-referrer

< content-length: 332

< date: Mon, 08 Aug 2022 10:16:27 GMT

< alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

<

Time:9.0s, ETA:0.0s [>]   332B/332B

* Connection #0 to host localmirror.clamavdatabase.com.com left intact

Mon Aug  8 10:16:27 2022 -> ^downloadFile: Unexpected response (502) from 
https://localmirror.clamavdatabase.com/daily.cvd

Mon Aug  8 10:16:27 2022 -> ^Can't download daily.cvd from https:// 
localmirror.clamavdatabase.com/daily.cvd<https://%20localmirror.clamavdatabase.com/daily.cvd>

Mon Aug  8 10:16:27 2022 -> Trying again in 5 secs...



Regards,

Ganesh




C2 General
___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/Cisco-Talos/clamav-documentation

https://docs.clamav.net/#mailing-lists-and-chat

Re: [clamav-users] freshclam error - ^downloadFile: Unexpected response (502) ...Can't Download CVD

[G.W. Haywood via clamav-users]

Hi there,

On Mon, 8 Aug 2022, Ganesh Kachare, Vodafone (External) via clamav-users wrote:


My local mirror static webserver has 4GB memory.. I can download
the CVD files with Debian based docker image but since it has so
much variabilities, I am using alpine image.


What are the 'variabilities' which lead you to avoid the Debian-based
Docker image?

I know that there have been a few issues with Docker and ClamAV but I
have no personal experience of them.  I can only suggest that if the
Debian version works OK then perhaps you should use it.  Alternatively
try something like

https://github.com/Cisco-Talos/clamav/issues?q=is%3Aissue+is%3Aopen+docker

--

73,
Ged.
___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/Cisco-Talos/clamav-documentation

https://docs.clamav.net/#mailing-lists-and-chat

Re: [clamav-users] freshclam error - ^downloadFile: Unexpected response (502) ...Can't Download CVD

[Ganesh Kachare, Vodafone (External) via clamav-users]

Hi Ged,

My local mirror static webserver has 4GB memory.. I can download the CVD files 
with Debian based docker image but since it has so much variabilities, I am 
using alpine image.

Regards,
Ganesh 


C2 General

-Original Message-
From: clamav-users  On Behalf Of G.W. 
Haywood via clamav-users
Sent: 08 August 2022 12:06
To: Ganesh Kachare, Vodafone (External) via clamav-users 

Cc: G.W. Haywood 
Subject: Re: [clamav-users] freshclam error - ^downloadFile: Unexpected 
response (502) ...Can't Download CVD

CYBER SECURITY WARNING: This email is from an external source - be careful of 
attachments and links. Please follow the Cyber Code and report suspicious 
emails.

Hi there,

On Mon, 8 Aug 2022, Ganesh Kachare, Vodafone (External) via clamav-users wrote:

> I am trying to download the clamav updates from private local mirror on my 
> custom clamav alpine docker image and  I am keep getting ^downloadFile: 
> Unexpected response (502) error from freshclam.
>
> Its not able to download main.cvd, daily.cvd, bytecode.cvd and eventually my 
> pod fails after maximum retry. I did tried increasing timeouts and disabling 
> it in freshclam.conf file but it did not work.
>
> I have validated my proxy and private mirror server and they are able to 
> connect with alpine clamav docker image.
>
> Does anyone face similar issue.. I am using clamav and freshclam v0.104.3-r0 
> on alpine 3.16

Does your mirror server have enough memory?

--

73,
Ged.
___

clamav-users mailing list
clamav-users@lists.clamav.net
https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.clamav.net%2Fmailman%2Flistinfo%2Fclamav-usersdata=05%7C01%7Cganesh.kachare%40vodafone.com%7C71208eb9252c4295ac1608da792e1110%7C68283f3b84874c86adb3a5228f18b893%7C0%7C0%7C637955536019252773%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7Csdata=HnF4Cj6FSsjcH5NtvHDsywbGqguEzjKGGF%2FsbZ4N26g%3Dreserved=0


Help us build a comprehensive ClamAV guide:
https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2FCisco-Talos%2Fclamav-documentationdata=05%7C01%7Cganesh.kachare%40vodafone.com%7C71208eb9252c4295ac1608da792e1110%7C68283f3b84874c86adb3a5228f18b893%7C0%7C0%7C637955536019252773%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7Csdata=q1iEDTLreX9vbSwVOmxuN8HHX1UjR2Qy21T0BMQ5RmM%3Dreserved=0

https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fdocs.clamav.net%2F%23mailing-lists-and-chatdata=05%7C01%7Cganesh.kachare%40vodafone.com%7C71208eb9252c4295ac1608da792e1110%7C68283f3b84874c86adb3a5228f18b893%7C0%7C0%7C637955536019252773%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7Csdata=cQ0aSpKxD0RB8kTVzMM6YdelzOzBYbS%2BoWGvrvyiDM8%3Dreserved=0
___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/Cisco-Talos/clamav-documentation

https://docs.clamav.net/#mailing-lists-and-chat

Re: [clamav-users] freshclam error - ^downloadFile: Unexpected response (502) ...Can't Download CVD

[G.W. Haywood via clamav-users]

Hi there,

On Mon, 8 Aug 2022, Ganesh Kachare, Vodafone (External) via clamav-users wrote:


I am trying to download the clamav updates from private local mirror on my 
custom clamav alpine docker image and  I am keep getting ^downloadFile: 
Unexpected response (502) error from freshclam.

Its not able to download main.cvd, daily.cvd, bytecode.cvd and eventually my 
pod fails after maximum retry. I did tried increasing timeouts and disabling it 
in freshclam.conf file but it did not work.

I have validated my proxy and private mirror server and they are able to 
connect with alpine clamav docker image.

Does anyone face similar issue.. I am using clamav and freshclam v0.104.3-r0 on 
alpine 3.16


Does your mirror server have enough memory?

--

73,
Ged.
___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/Cisco-Talos/clamav-documentation

https://docs.clamav.net/#mailing-lists-and-chat

[clamav-users] freshclam error - ^downloadFile: Unexpected response (502) ...Can't Download CVD

[Ganesh Kachare, Vodafone (External) via clamav-users]

Hi Team,

I am trying to download the clamav updates from private local mirror on my 
custom clamav alpine docker image and  I am keep getting ^downloadFile: 
Unexpected response (502) error from freshclam.

Its not able to download main.cvd, daily.cvd, bytecode.cvd and eventually my 
pod fails after maximum retry. I did tried increasing timeouts and disabling it 
in freshclam.conf file but it did not work.

I have validated my proxy and private mirror server and they are able to 
connect with alpine clamav docker image.

Does anyone face similar issue.. I am using clamav and freshclam v0.104.3-r0 on 
alpine 3.16

Logs ---

Host: localmirror.clamavdatabase.com
user-agent: ClamAV/0.104.3 (OS: Linux, ARCH: x86_64, CPU: x86_64, UUID: 
a37614fe-f1f8-4c49-a7a5-e0330ea8b945)
accept: */*
connection: close

* old SSL session ID is stale, removing
< HTTP/2 502
< content-type: text/html; charset=UTF-8
< referrer-policy: no-referrer
< content-length: 332
< date: Mon, 08 Aug 2022 10:16:27 GMT
< alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
<
Time:9.0s, ETA:0.0s [>]   332B/332B
* Connection #0 to host localmirror.clamavdatabase.com.com left intact
Mon Aug  8 10:16:27 2022 -> ^downloadFile: Unexpected response (502) from 
https://localmirror.clamavdatabase.com/daily.cvd
Mon Aug  8 10:16:27 2022 -> ^Can't download daily.cvd from https:// 
localmirror.clamavdatabase.com/daily.cvd
Mon Aug  8 10:16:27 2022 -> Trying again in 5 secs...

Regards,
Ganesh



C2 General
___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/Cisco-Talos/clamav-documentation

https://docs.clamav.net/#mailing-lists-and-chat

Re: [clamav-users] freshclam error - need your expertise as soon as possible please.

[Manavi-Pour, Gazelle]

Very useful tip. Appreciate it. Fixed my issue.



Regards,

Gazelle Manavi-pour
Digital Health Delivery Platform (DHDP)| eHealth Ontario
415 Yonge Street / 10th floor, Toronto, ON, M5G 2C8
Office: 416.586.4353  Mobile: 647.632.8909
gazelle.manavi-p...@ehealthontario.on.ca

Vacation Alert: Aug 19th - Sept 1 - 2018





-Original Message-
From: clamav-users [mailto:clamav-users-boun...@lists.clamav.net] On Behalf Of 
Noel Jones
Sent: Wednesday, April 18, 2018 2:48 PM
To: clamav-users@lists.clamav.net
Subject: Re: [clamav-users] freshclam error - need your expertise as soon as 
possible please.

On 4/18/2018 12:59 PM, Manavi-Pour, Gazelle wrote:
> Hello folks,
> 
> Just wondering what does "previous errors" mean in here.
> I have verified from my server, I can download  download 
> http://db.CA.clamav.net/main-58.cdiff using wget. No issues, but when 
> I run freshclam I get error. Please advise. Thanks

freshclam records download errors in a file "mirrors.dat" so it won't keep 
retrying a bad server.  Those servers are ignored for a time, and eventually 
retried (after few days I think).

It's safe to remove the mirrors.dat file to reset the download history.

rm /var/lib/clamav/mirrors.dat

then run freshclam again.



  -- Noel Jones


> 
> # freshclam --stdout --verbose -v
> Current working dir is /var/lib/clamav Max retries == 3 ClamAV update 
> process started at Wed Apr 18 13:09:36 2018 Using IPv6 aware code 
> Querying current.cvd.clamav.net
> TTL: 1800
> Software version from DNS: 0.100.0
> WARNING: Your ClamAV installation is OUTDATED!
> WARNING: Local version: 0.99.2 Recommended version: 0.100.0 DON'T 
> PANIC! Read http://www.clamav.net/documents/upgrading-clamav
> main.cvd version from DNS: 58
> Retrieving http://db.CA.clamav.net/main-58.cdiff
> Ignoring mirror 10.247.231.155 (due to previous errors)   ==> this is the IP 
> of my proxy server(on datapower). Which points to the mirror in Canada.
> Ignoring mirror 10.247.231.155 (due to previous errors) ==> what does this 
> previous error mean? I do not have errors , I see just warnings.
> WARNING: getpatch: Can't download main-58.cdiff from db.CA.clamav.net 
> Retrieving http://db.CA.clamav.net/main-58.cdiff
> Ignoring mirror 10.247.231.155 (due to previous errors)
> WARNING: getpatch: Can't download main-58.cdiff from db.CA.clamav.net 
> Retrieving http://db.CA.clamav.net/main-58.cdiff
> Ignoring mirror 10.247.231.155 (due to previous errors)
> WARNING: getpatch: Can't download main-58.cdiff from db.CA.clamav.net
> WARNING: Incremental update failed, trying to download main.cvd 
> Whitelisting short-term blacklisted mirrors Retrieving 
> http://db.CA.clamav.net/main.cvd Ignoring mirror 10.247.231.155 (due 
> to previous errors) Ignoring mirror 10.247.231.155 (due to previous 
> errors)
> WARNING: Can't download main.cvd from db.CA.clamav.net Trying again in 
> 5 secs...
> 
> As I mentioned from the server I can download the file, so the server and 
> proxy server(datapower) are communication well.
> 
> wget http://db.CA.clamav.net/main-58.cdiff
> --2018-04-18 13:22:36--  http://db.ca.clamav.net/main-58.cdiff
> Resolving db.ca.clamav.net (db.ca.clamav.net)... 10.247.231.155 
> Connecting to db.ca.clamav.net (db.ca.clamav.net)|10.247.231.155|:80... 
> connected.
> HTTP request sent, awaiting response... Read error (Connection reset by peer) 
> in headers.
> Retrying.
> 
> --2018-04-18 13:22:37--  (try: 2)  
> http://db.ca.clamav.net/main-58.cdiff
> Connecting to db.ca.clamav.net (db.ca.clamav.net)|10.247.231.155|:80... 
> connected.
> HTTP request sent, awaiting response... 200 OK
> Length: 8808462 (8.4M)
> Saving to: 'main-58.cdiff'
> 
> 100%[=>]
>  8,808,462   2.77MB/s   in 3.0s
> 
> 2018-04-18 13:22:41 (2.77 MB/s) - 'main-58.cdiff' saved 
> [8808462/8808462]
> 
> 
> Regards,
> 
> Gazelle Manavi-pour
> Digital Health Delivery Platform (DHDP)| eHealth Ontario
> 415 Yonge Street / 10th floor, Toronto, ON, M5G 2C8
> Office: 416.586.4353  Mobile: 647.632.8909 
> gazelle.manavi-p...@ehealthontario.on.ca<mailto:gazelle.manavi-pour@eh
> ealthontario.on.ca>
> 
> Vacation Alert: Aug 19th - Sept 1 - 2018
> 
> 
> 
> 
> 
> 
> ___
> clamav-users mailing list
> clamav-users@lists.clamav.net
> http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
> 
> 
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
> 
> http://www

Re: [clamav-users] freshclam error - need your expertise as soon as possible please.

[Noel Jones]

On 4/18/2018 12:59 PM, Manavi-Pour, Gazelle wrote:
> Hello folks,
> 
> Just wondering what does "previous errors" mean in here.
> I have verified from my server, I can download  download 
> http://db.CA.clamav.net/main-58.cdiff using wget. No issues, but when I run 
> freshclam I get error. Please advise. Thanks

freshclam records download errors in a file "mirrors.dat" so it
won't keep retrying a bad server.  Those servers are ignored for a
time, and eventually retried (after few days I think).

It's safe to remove the mirrors.dat file to reset the download history.

rm /var/lib/clamav/mirrors.dat

then run freshclam again.



  -- Noel Jones


> 
> # freshclam --stdout --verbose -v
> Current working dir is /var/lib/clamav
> Max retries == 3
> ClamAV update process started at Wed Apr 18 13:09:36 2018
> Using IPv6 aware code
> Querying current.cvd.clamav.net
> TTL: 1800
> Software version from DNS: 0.100.0
> WARNING: Your ClamAV installation is OUTDATED!
> WARNING: Local version: 0.99.2 Recommended version: 0.100.0
> DON'T PANIC! Read http://www.clamav.net/documents/upgrading-clamav
> main.cvd version from DNS: 58
> Retrieving http://db.CA.clamav.net/main-58.cdiff
> Ignoring mirror 10.247.231.155 (due to previous errors)   ==> this is the IP 
> of my proxy server(on datapower). Which points to the mirror in Canada.
> Ignoring mirror 10.247.231.155 (due to previous errors) ==> what does this 
> previous error mean? I do not have errors , I see just warnings.
> WARNING: getpatch: Can't download main-58.cdiff from db.CA.clamav.net
> Retrieving http://db.CA.clamav.net/main-58.cdiff
> Ignoring mirror 10.247.231.155 (due to previous errors)
> WARNING: getpatch: Can't download main-58.cdiff from db.CA.clamav.net
> Retrieving http://db.CA.clamav.net/main-58.cdiff
> Ignoring mirror 10.247.231.155 (due to previous errors)
> WARNING: getpatch: Can't download main-58.cdiff from db.CA.clamav.net
> WARNING: Incremental update failed, trying to download main.cvd
> Whitelisting short-term blacklisted mirrors
> Retrieving http://db.CA.clamav.net/main.cvd
> Ignoring mirror 10.247.231.155 (due to previous errors)
> Ignoring mirror 10.247.231.155 (due to previous errors)
> WARNING: Can't download main.cvd from db.CA.clamav.net
> Trying again in 5 secs...
> 
> As I mentioned from the server I can download the file, so the server and 
> proxy server(datapower) are communication well.
> 
> wget http://db.CA.clamav.net/main-58.cdiff
> --2018-04-18 13:22:36--  http://db.ca.clamav.net/main-58.cdiff
> Resolving db.ca.clamav.net (db.ca.clamav.net)... 10.247.231.155
> Connecting to db.ca.clamav.net (db.ca.clamav.net)|10.247.231.155|:80... 
> connected.
> HTTP request sent, awaiting response... Read error (Connection reset by peer) 
> in headers.
> Retrying.
> 
> --2018-04-18 13:22:37--  (try: 2)  http://db.ca.clamav.net/main-58.cdiff
> Connecting to db.ca.clamav.net (db.ca.clamav.net)|10.247.231.155|:80... 
> connected.
> HTTP request sent, awaiting response... 200 OK
> Length: 8808462 (8.4M)
> Saving to: 'main-58.cdiff'
> 
> 100%[=>]
>  8,808,462   2.77MB/s   in 3.0s
> 
> 2018-04-18 13:22:41 (2.77 MB/s) - 'main-58.cdiff' saved [8808462/8808462]
> 
> 
> Regards,
> 
> Gazelle Manavi-pour
> Digital Health Delivery Platform (DHDP)| eHealth Ontario
> 415 Yonge Street / 10th floor, Toronto, ON, M5G 2C8
> Office: 416.586.4353  Mobile: 647.632.8909
> gazelle.manavi-p...@ehealthontario.on.ca
> 
> Vacation Alert: Aug 19th - Sept 1 - 2018
> 
> 
> 
> 
> 
> 
> ___
> clamav-users mailing list
> clamav-users@lists.clamav.net
> http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
> 
> 
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
> 
> http://www.clamav.net/contact.html#ml
> 

___
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

[clamav-users] freshclam error - need your expertise as soon as possible please.

[Manavi-Pour, Gazelle]

Hello folks,

Just wondering what does "previous errors" mean in here.
I have verified from my server, I can download  download 
http://db.CA.clamav.net/main-58.cdiff using wget. No issues, but when I run 
freshclam I get error. Please advise. Thanks

# freshclam --stdout --verbose -v
Current working dir is /var/lib/clamav
Max retries == 3
ClamAV update process started at Wed Apr 18 13:09:36 2018
Using IPv6 aware code
Querying current.cvd.clamav.net
TTL: 1800
Software version from DNS: 0.100.0
WARNING: Your ClamAV installation is OUTDATED!
WARNING: Local version: 0.99.2 Recommended version: 0.100.0
DON'T PANIC! Read http://www.clamav.net/documents/upgrading-clamav
main.cvd version from DNS: 58
Retrieving http://db.CA.clamav.net/main-58.cdiff
Ignoring mirror 10.247.231.155 (due to previous errors)   ==> this is the IP of 
my proxy server(on datapower). Which points to the mirror in Canada.
Ignoring mirror 10.247.231.155 (due to previous errors) ==> what does this 
previous error mean? I do not have errors , I see just warnings.
WARNING: getpatch: Can't download main-58.cdiff from db.CA.clamav.net
Retrieving http://db.CA.clamav.net/main-58.cdiff
Ignoring mirror 10.247.231.155 (due to previous errors)
WARNING: getpatch: Can't download main-58.cdiff from db.CA.clamav.net
Retrieving http://db.CA.clamav.net/main-58.cdiff
Ignoring mirror 10.247.231.155 (due to previous errors)
WARNING: getpatch: Can't download main-58.cdiff from db.CA.clamav.net
WARNING: Incremental update failed, trying to download main.cvd
Whitelisting short-term blacklisted mirrors
Retrieving http://db.CA.clamav.net/main.cvd
Ignoring mirror 10.247.231.155 (due to previous errors)
Ignoring mirror 10.247.231.155 (due to previous errors)
WARNING: Can't download main.cvd from db.CA.clamav.net
Trying again in 5 secs...

As I mentioned from the server I can download the file, so the server and proxy 
server(datapower) are communication well.

wget http://db.CA.clamav.net/main-58.cdiff
--2018-04-18 13:22:36--  http://db.ca.clamav.net/main-58.cdiff
Resolving db.ca.clamav.net (db.ca.clamav.net)... 10.247.231.155
Connecting to db.ca.clamav.net (db.ca.clamav.net)|10.247.231.155|:80... 
connected.
HTTP request sent, awaiting response... Read error (Connection reset by peer) 
in headers.
Retrying.

--2018-04-18 13:22:37--  (try: 2)  http://db.ca.clamav.net/main-58.cdiff
Connecting to db.ca.clamav.net (db.ca.clamav.net)|10.247.231.155|:80... 
connected.
HTTP request sent, awaiting response... 200 OK
Length: 8808462 (8.4M)
Saving to: 'main-58.cdiff'

100%[=>]
 8,808,462   2.77MB/s   in 3.0s

2018-04-18 13:22:41 (2.77 MB/s) - 'main-58.cdiff' saved [8808462/8808462]


Regards,

Gazelle Manavi-pour
Digital Health Delivery Platform (DHDP)| eHealth Ontario
415 Yonge Street / 10th floor, Toronto, ON, M5G 2C8
Office: 416.586.4353  Mobile: 647.632.8909
gazelle.manavi-p...@ehealthontario.on.ca

Vacation Alert: Aug 19th - Sept 1 - 2018






___
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] freshclam error

[Tsutomu Oyamada]

Sorry,

We were confused.
Version 0.97.8 and is older.
We upgraded the 0.98.1 version of ClamAV.
Once you do so without any problems now.

T.O

On Fri, 30 Sep 2016 12:11:49 +0200
Matus UHLAR - fantomas  wrote:

> On 30.09.16 00:01, Tsutomu Oyamada wrote:
> >Following error is showed when the CVD is updated on freshclam;
> >
> >Sep 27 04:00:05 W1K freshclam[26882]: [LibClamAV] mpool_malloc():Attempt to 
> >allocate 8388608 bytes. Please report to http://bugs.clamav.net
> >
> >This error has been showed from 26th September.
> >The version of ClamAV is 0.98.1.
> >
> >Could you tell us the cause of this error and how to solve it?
> 
> you are apparently running out of memory.
> How much memory do you have installed and what 3rd party databases do you use?
> 
> is there other memory-hungry software installed on that machine?
> -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
> Warning: I wish NOT to receive e-mail advertising to this address.
> Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
> "Where do you want to go to die?" [Microsoft]
> ___
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
> 
> http://www.clamav.net/contact.html#ml


___
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] freshclam error

[Matus UHLAR - fantomas]

On 30.09.16 00:01, Tsutomu Oyamada wrote:

Following error is showed when the CVD is updated on freshclam;

Sep 27 04:00:05 W1K freshclam[26882]: [LibClamAV] mpool_malloc():Attempt to 
allocate 8388608 bytes. Please report to http://bugs.clamav.net

This error has been showed from 26th September.
The version of ClamAV is 0.98.1.

Could you tell us the cause of this error and how to solve it?


you are apparently running out of memory.
How much memory do you have installed and what 3rd party databases do you use?

is there other memory-hungry software installed on that machine?
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
"Where do you want to go to die?" [Microsoft]
___
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] freshclam error

[Tsutomu Oyamada]

Thank you for your reply.

We tried it on another machine.
But the result is successful.
It is running the same freshclam module.
Cause is insufficient memory allocation?

Current working dir is /usr/lib/clamav
Max retries == 3
ClamAV update process started at Fri Sep 30 00:19:08 2016
Using IPv6 aware code
Querying current.cvd.clamav.net
TTL: 186
Software version from DNS: 0.99.2
WARNING: Your ClamAV installation is OUTDATED!
WARNING: Local version: 0.98.1 Recommended version: 0.99.2
DON'T PANIC! Read http://www.clamav.net/support/faq
main.cvd version from DNS: 57
Retrieving http://m82pxl1g/main.cvd
Trying to download http://m82pxl1g/main.cvd (IP: 192.168.16.80)
Downloading main.cvd [100%]
Loading signatures from main.cvd
Properly loaded 4218790 signatures from new main.cvd
main.cvd updated (version: 57, sigs: 4218790, f-level: 60, builder: amishhammer)
daily.cvd version from DNS: 22273
Retrieving http://m82pxl1g/daily.cvd
Trying to download http://m82pxl1g/daily.cvd (IP: 192.168.16.80)
Downloading daily.cvd [100%]
Loading signatures from daily.cvd
Properly loaded 642055 signatures from new daily.cvd
daily.cvd updated (version: 22273, sigs: 642076, f-level: 63, builder: neo)
bytecode.cvd version from DNS: 283
Retrieving http://m82pxl1g/bytecode.cvd
Trying to download http://m82pxl1g/bytecode.cvd (IP: 192.168.16.80)
Downloading bytecode.cvd [100%]
Loading signatures from bytecode.cvd
Properly loaded 53 signatures from new bytecode.cvd
bytecode.cvd updated (version: 283, sigs: 53, f-level: 63, builder: neo)
Database updated (4860919 signatures) from m82pxl1g (IP: 192.168.16.80)

Best regards,

Tsutomu Oyamada
Promark inc.
Japan

On Thu, 29 Sep 2016 17:15:01 +0200
Reindl Harald <h.rei...@thelounge.net> wrote:

> 
> 
> Am 29.09.2016 um 17:05 schrieb robin.wakefi...@ubs.com:
> > We've just noticed this has started to appear in the logs too.  Any clues 
> > please?
> 
> also with the outdated clamav?
> clamav-update-0.99.2-1.fc24.x86_64 has no problems
> 
> both of you don't find it worth to tell distro and version while in case of a 
> outdated distro-binary becuase a wrong understaing of LTS has it's place in 
> the distributions bugtracker
> 
> they most likely updated some other library which triggers the problem
> 
> Sep 29 16:25:18 buildserver freshclam[29365]: ClamAV update process started 
> at Thu Sep 29 16:25:18 2016
> Sep 29 16:25:18 buildserver freshclam[29365]: main.cvd is up to date 
> (version: 57, sigs: 4218790, f-level: 60, builder: amishhammer)
> Sep 29 16:25:48 buildserver freshclam[29365]: nonblock_connect: connect 
> timing out (30 secs)
> Sep 29 16:25:48 buildserver freshclam[29365]: Can't connect to port 80 of 
> host db.at.clamav.net (IP: 81.223.20.171)
> Sep 29 16:25:48 buildserver freshclam[29365]: Trying host db.at.clamav.net 
> (193.1.193.64)...
> Sep 29 16:25:49 buildserver freshclam[29365]: Downloading daily-22273.cdiff 
> [100%]
> Sep 29 16:25:50 buildserver freshclam[29365]: daily.cld updated (version: 
> 22273, sigs: 642076, f-level: 63, builder: neo)
> Sep 29 16:25:51 buildserver freshclam[29365]: safebrowsing.cvd is up to date 
> (version: 45066, sigs: 3009769, f-level: 63, builder: google)
> Sep 29 16:25:51 buildserver freshclam[29365]: bytecode.cvd is up to date 
> (version: 283, sigs: 53, f-level: 63, builder: neo)
> Sep 29 16:25:56 buildserver freshclam[29365]: Database updated (7870688 
> signatures) from db.at.clamav.net (IP: 193.1.193.64)
> 
> > -Original Message-
> > From: clamav-users [mailto:clamav-users-boun...@lists.clamav.net] On Behalf 
> > Of Rafael Ferreira
> > Sent: 29 September 2016 16:03
> > To: ClamAV users ML
> > Subject: Re: [clamav-users] freshclam error
> >
> > That appears to be a memory issue with your host, the malloc (memory 
> > allocator) is failing.
> >
> >> On Sep 29, 2016, at 8:01 AM, Tsutomu Oyamada <oyam...@promark-inc.com> 
> >> wrote:
> >>
> >> Hi,
> >>
> >> Following error is showed when the CVD is updated on freshclam;
> >>
> >> Sep 27 04:00:05 W1K freshclam[26882]: [LibClamAV] mpool_malloc():Attempt 
> >> to allocate 8388608 bytes. Please report to http://bugs.clamav.net
> >>
> >> This error has been showed from 26th September.
> >> The version of ClamAV is 0.98.1.
> >>
> >> Could you tell us the cause of this error and how to solve it?
> ___
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
> 
> http://www.clamav.net/contact.html#ml


___
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] freshclam error

[Reindl Harald]

Am 29.09.2016 um 17:05 schrieb robin.wakefi...@ubs.com:

We've just noticed this has started to appear in the logs too.  Any clues 
please?


also with the outdated clamav?
clamav-update-0.99.2-1.fc24.x86_64 has no problems

both of you don't find it worth to tell distro and version while in case 
of a outdated distro-binary becuase a wrong understaing of LTS has it's 
place in the distributions bugtracker


they most likely updated some other library which triggers the problem

Sep 29 16:25:18 buildserver freshclam[29365]: ClamAV update process 
started at Thu Sep 29 16:25:18 2016
Sep 29 16:25:18 buildserver freshclam[29365]: main.cvd is up to date 
(version: 57, sigs: 4218790, f-level: 60, builder: amishhammer)
Sep 29 16:25:48 buildserver freshclam[29365]: nonblock_connect: connect 
timing out (30 secs)
Sep 29 16:25:48 buildserver freshclam[29365]: Can't connect to port 80 
of host db.at.clamav.net (IP: 81.223.20.171)
Sep 29 16:25:48 buildserver freshclam[29365]: Trying host 
db.at.clamav.net (193.1.193.64)...
Sep 29 16:25:49 buildserver freshclam[29365]: Downloading 
daily-22273.cdiff [100%]
Sep 29 16:25:50 buildserver freshclam[29365]: daily.cld updated 
(version: 22273, sigs: 642076, f-level: 63, builder: neo)
Sep 29 16:25:51 buildserver freshclam[29365]: safebrowsing.cvd is up to 
date (version: 45066, sigs: 3009769, f-level: 63, builder: google)
Sep 29 16:25:51 buildserver freshclam[29365]: bytecode.cvd is up to date 
(version: 283, sigs: 53, f-level: 63, builder: neo)
Sep 29 16:25:56 buildserver freshclam[29365]: Database updated (7870688 
signatures) from db.at.clamav.net (IP: 193.1.193.64)



-Original Message-
From: clamav-users [mailto:clamav-users-boun...@lists.clamav.net] On Behalf Of 
Rafael Ferreira
Sent: 29 September 2016 16:03
To: ClamAV users ML
Subject: Re: [clamav-users] freshclam error

That appears to be a memory issue with your host, the malloc (memory allocator) 
is failing.


On Sep 29, 2016, at 8:01 AM, Tsutomu Oyamada <oyam...@promark-inc.com> wrote:

Hi,

Following error is showed when the CVD is updated on freshclam;

Sep 27 04:00:05 W1K freshclam[26882]: [LibClamAV] mpool_malloc():Attempt to 
allocate 8388608 bytes. Please report to http://bugs.clamav.net

This error has been showed from 26th September.
The version of ClamAV is 0.98.1.

Could you tell us the cause of this error and how to solve it?

___
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] freshclam error

[Joel Esler (jesler)]

Did anyone file a bug at bugs.clamav.net<http://bugs.clamav.net>?


On Sep 29, 2016, at 11:05 AM, 
robin.wakefi...@ubs.com<mailto:robin.wakefi...@ubs.com> wrote:

Hi,

We've just noticed this has started to appear in the logs too.  Any clues 
please?

Thanks, Robin

-Original Message-
From: clamav-users [mailto:clamav-users-boun...@lists.clamav.net] On Behalf Of 
Rafael Ferreira
Sent: 29 September 2016 16:03
To: ClamAV users ML
Subject: Re: [clamav-users] freshclam error

That appears to be a memory issue with your host, the malloc (memory allocator) 
is failing.

On Sep 29, 2016, at 8:01 AM, Tsutomu Oyamada 
<oyam...@promark-inc.com<mailto:oyam...@promark-inc.com>> wrote:

Hi,

Following error is showed when the CVD is updated on freshclam;

Sep 27 04:00:05 W1K freshclam[26882]: [LibClamAV] mpool_malloc():Attempt to 
allocate 8388608 bytes. Please report to http://bugs.clamav.net

This error has been showed from 26th September.
The version of ClamAV is 0.98.1.

Could you tell us the cause of this error and how to solve it?

Best regards,

Tsutomu Oyamada
Promark Inc.
Japan


___
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

___
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml
___
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

___
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] freshclam error

[robin.wakefield]

Hi,

We've just noticed this has started to appear in the logs too.  Any clues 
please?

Thanks, Robin

-Original Message-
From: clamav-users [mailto:clamav-users-boun...@lists.clamav.net] On Behalf Of 
Rafael Ferreira
Sent: 29 September 2016 16:03
To: ClamAV users ML
Subject: Re: [clamav-users] freshclam error

That appears to be a memory issue with your host, the malloc (memory allocator) 
is failing. 

> On Sep 29, 2016, at 8:01 AM, Tsutomu Oyamada <oyam...@promark-inc.com> wrote:
> 
> Hi,
> 
> Following error is showed when the CVD is updated on freshclam;
> 
> Sep 27 04:00:05 W1K freshclam[26882]: [LibClamAV] mpool_malloc():Attempt to 
> allocate 8388608 bytes. Please report to http://bugs.clamav.net
> 
> This error has been showed from 26th September.
> The version of ClamAV is 0.98.1.
> 
> Could you tell us the cause of this error and how to solve it?
> 
> Best regards,
> 
> Tsutomu Oyamada
> Promark Inc.
> Japan
> 
> 
> ___
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
> 
> http://www.clamav.net/contact.html#ml

___
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml
___
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] freshclam error

[Rafael Ferreira]

That appears to be a memory issue with your host, the malloc (memory allocator) 
is failing. 

> On Sep 29, 2016, at 8:01 AM, Tsutomu Oyamada  wrote:
> 
> Hi,
> 
> Following error is showed when the CVD is updated on freshclam;
> 
> Sep 27 04:00:05 W1K freshclam[26882]: [LibClamAV] mpool_malloc():Attempt to 
> allocate 8388608 bytes. Please report to http://bugs.clamav.net
> 
> This error has been showed from 26th September.
> The version of ClamAV is 0.98.1.
> 
> Could you tell us the cause of this error and how to solve it?
> 
> Best regards,
> 
> Tsutomu Oyamada
> Promark Inc.
> Japan
> 
> 
> ___
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
> 
> http://www.clamav.net/contact.html#ml

___
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

[clamav-users] freshclam error

[Tsutomu Oyamada]

Hi,

Following error is showed when the CVD is updated on freshclam;

Sep 27 04:00:05 W1K freshclam[26882]: [LibClamAV] mpool_malloc():Attempt to 
allocate 8388608 bytes. Please report to http://bugs.clamav.net

This error has been showed from 26th September.
The version of ClamAV is 0.98.1.

Could you tell us the cause of this error and how to solve it?

Best regards,

Tsutomu Oyamada
Promark Inc.
Japan


___
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] freshclam error

[Steven Morgan]

This is a wild guess, but try to configure ClamAV with --enable-llvm=no.

Otherwise, open a bug at bugzilla.clamav.net.

Steve
___
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] freshclam error

[Steven Morgan]

I'm thinking this is the same problem as
https://bugzilla.clamav.net/show_bug.cgi?id=11309 . You'll find a few other
./configure options there.

Steve
___
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

[clamav-users] freshclam error

[Jerry]

This is a new installation of clamav on a FreeBSD 11 amd64 system. I am
encountering errors in the freshclam.log file. This is the output from
a clean start with debug messages enabled.

Fri Mar 18 10:30:49 2016 -> --
Fri Mar 18 10:30:49 2016 -> Current working dir is /var/db/clamav
Fri Mar 18 10:30:49 2016 -> freshclam daemon 0.99 (OS: freebsd11.0, ARCH: 
amd64, CPU: amd64)
Fri Mar 18 10:30:49 2016 -> Max retries == 3
Fri Mar 18 10:30:49 2016 -> ClamAV update process started at Fri Mar 18 
10:30:49 2016
Fri Mar 18 10:30:49 2016 -> Using IPv6 aware code
Fri Mar 18 10:30:49 2016 -> Querying current.cvd.clamav.net
Fri Mar 18 10:30:49 2016 -> TTL: 1017
Fri Mar 18 10:30:49 2016 -> Software version from DNS: 0.99.1
Fri Mar 18 10:30:49 2016 -> WARNING: Your ClamAV installation is OUTDATED!
Fri Mar 18 10:30:49 2016 -> WARNING: Local version: 0.99 Recommended version: 
0.99.1
Fri Mar 18 10:30:49 2016 -> DON'T PANIC! Read http://www.clamav.net/support/faq
Fri Mar 18 10:30:49 2016 -> main.cvd version from DNS: 57
Fri Mar 18 10:30:49 2016 -> main.cvd is up to date (version: 57, sigs: 4218790, 
f-level: 60, builder: amishhammer)
Fri Mar 18 10:30:49 2016 -> daily.cvd version from DNS: 21466
Fri Mar 18 10:30:49 2016 -> daily.cvd is up to date (version: 21466, sigs: 
83889, f-level: 63, builder: amishhammer)
Fri Mar 18 10:30:49 2016 -> safebrowsing.cvd version from DNS: 44501
Fri Mar 18 10:30:49 2016 -> safebrowsing.cvd is up to date (version: 44501, 
sigs: 1935466, f-level: 63, builder: google)
Fri Mar 18 10:30:49 2016 -> Retrieving http://db.US.clamav.net/bytecode.cvd
Fri Mar 18 10:30:50 2016 -> Trying to download 
http://db.US.clamav.net/bytecode.cvd (IP: 128.199.133.36)
Fri Mar 18 10:31:20 2016 -> nonblock_recv: recv timing out (30 secs)
Fri Mar 18 10:31:20 2016 -> WARNING: getfile: Error while reading database from 
db.US.clamav.net (IP: 128.199.133.36): Operation now in progress
Fri Mar 18 10:31:20 2016 -> WARNING: Can't download bytecode.cvd from 
db.US.clamav.net
Fri Mar 18 10:31:20 2016 -> Querying bytecode.0.81.0.0.80C78524.ping.clamav.net
Fri Mar 18 10:31:20 2016 -> Trying again in 5 secs...
Fri Mar 18 10:31:25 2016 -> ClamAV update process started at Fri Mar 18 
10:31:25 2016
Fri Mar 18 10:31:25 2016 -> Using IPv6 aware code
Fri Mar 18 10:31:25 2016 -> Querying current.cvd.clamav.net
Fri Mar 18 10:31:25 2016 -> TTL: 981
Fri Mar 18 10:31:25 2016 -> Software version from DNS: 0.99.1
Fri Mar 18 10:31:25 2016 -> WARNING: Your ClamAV installation is OUTDATED!
Fri Mar 18 10:31:25 2016 -> WARNING: Local version: 0.99 Recommended version: 
0.99.1
Fri Mar 18 10:31:25 2016 -> DON'T PANIC! Read http://www.clamav.net/support/faq
Fri Mar 18 10:31:25 2016 -> main.cvd version from DNS: 57
Fri Mar 18 10:31:25 2016 -> main.cvd is up to date (version: 57, sigs: 4218790, 
f-level: 60, builder: amishhammer)
Fri Mar 18 10:31:25 2016 -> daily.cvd version from DNS: 21466
Fri Mar 18 10:31:25 2016 -> daily.cvd is up to date (version: 21466, sigs: 
83889, f-level: 63, builder: amishhammer)
Fri Mar 18 10:31:25 2016 -> safebrowsing.cvd version from DNS: 44501
Fri Mar 18 10:31:25 2016 -> safebrowsing.cvd is up to date (version: 44501, 
sigs: 1935466, f-level: 63, builder: google)
Fri Mar 18 10:31:25 2016 -> Retrieving http://db.US.clamav.net/bytecode.cvd
Fri Mar 18 10:31:25 2016 -> Trying to download 
http://db.US.clamav.net/bytecode.cvd (IP: 200.236.31.1)
Fri Mar 18 10:31:26 2016 -> Downloading bytecode.cvd [100%]
Fri Mar 18 10:31:26 2016 -> Loading signatures from bytecode.cvd
Fri Mar 18 10:31:26 2016 -> LibClamAV debug: Initializing phishcheck module
Fri Mar 18 10:31:26 2016 -> LibClamAV debug: Phishcheck: Compiling regex: ^ 
*(http|https|ftp:(//)?)?[0-9]{1,3}(\.[0-9]{1,3}){3}[/?:]? *$
Fri Mar 18 10:31:26 2016 -> LibClamAV debug: Phishcheck module initialized
Fri Mar 18 10:31:26 2016 -> LibClamAV debug: Bytecode initialized in JIT mode
Fri Mar 18 10:31:26 2016 -> LibClamAV debug: in cli_cvdload()
Fri Mar 18 10:31:26 2016 -> LibClamAV debug: MD5(.tar.gz) = 
f6452312a7a8c1e0a00b9c2402e0f2ed
Fri Mar 18 10:31:26 2016 -> LibClamAV debug: cli_versig: Decoded signature: 
f6452312a7a8c1e0a00b9c2402e0f2ed
Fri Mar 18 10:31:26 2016 -> LibClamAV debug: cli_versig: Digital signature is 
correct.
Fri Mar 18 10:31:26 2016 -> LibClamAV debug: in cli_tgzload()
Fri Mar 18 10:31:26 2016 -> LibClamAV debug: bytecode.info loaded
Fri Mar 18 10:31:26 2016 -> LibClamAV debug: in cli_tgzload_cleanup()
Fri Mar 18 10:31:26 2016 -> LibClamAV debug: in cli_tgzload()
Fri Mar 18 10:31:26 2016 -> LibClamAV debug: Initializing engine->root[0]
Fri Mar 18 10:31:26 2016 -> LibClamAV debug: Initialising AC pattern matcher of 
root[0]
Fri Mar 18 10:31:26 2016 -> LibClamAV debug: cli_initroots: Initializing BM 
tables of root[0]
Fri Mar 18 10:31:26 2016 -> LibClamAV debug: Initializing engine->root[1]
Fri Mar 18 10:31:26 2016 -> LibClamAV debug: Initialising AC pattern matcher of 
root[1]
Fri Mar 18 10:31:26 2016 -> LibClamAV debug: 

[clamav-users] Freshclam error when trying to write to log file

[Wietse Jorissen]

Freshclam can't write to its logfile, (it used to work). After chowning the
offending files, I got another message simply stating that it could not
connect. I assume it can't find the correct clamd.sock to connect to, but I
yet have to find in which configuration file this is defined.

At the moment I fear that I've got 2 clamd (one through Amavis and one that
seemed to be there all of the sudden) daemons and that freshclam gets
confused.

How should I proceed?


Thanks for any insights you might provide me with.

Attached below is all relevant information I could find (at the bottom are
the smaller config files)

===

I'm having an issue with my ClamAV, I was using it in combination with
Amavis, but I'm afraid after updating I now have 2 services running which
both identify as ClamAV daemons, breaking the freshclam update process and
causing other errors.

This is a live server, and I don't really have an idea of where to start
looking. Attached as much information as I could collect.

Error message:
--

/etc/cron.daily/freshclam:

ERROR: Problem with internal logger (UpdateLogFile =
/var/log/clamav/freshclam.log).
ERROR: Can't open /var/log/clamav/freshclam.log in append mode (check
permissions!).

Checking out said folder: (the owner is indeed wrong)
-

cd /var/log/clamav/

-rw-r--r--. 1 clam   clam   0 jun  2 03:50 clamd.log
-rw-r--r--. 1 clamav clamav 59314 mei 12 03:13 clamd.log-20130512
-rw-r--r--. 1 clamav clamav 59926 mei 19 04:41 clamd.log-20130519
-rw-r--r--. 1 clamav clamav 40383 mei 24 16:43 clamd.log-20130526
-rw-r--r--. 1 clamav clamav  3295 mei 29 11:17 clamd.log-20130602
-rw-r--r--. 1 clam   clam   0 jun  2 03:50 freshclam.log
-rw-r--r--. 1 clamav clamav  6006 mei 12 03:13 freshclam.log-20130512
-rw-r--r--. 1 clamav clamav  5940 mei 19 04:41 freshclam.log-20130519
-rw-r--r--. 1 clamav clamav  3733 mei 26 03:50 freshclam.log-20130526
-rw-r--r--. 1 clamav clamav  6274 jun  2 03:50 freshclam.log-20130602


Troubleshooting attempt as per the FAQ
--

[bob@pluto ~]$ whereis freshclam
freshclam: /usr/bin/freshclam /etc/freshclam.conf
/usr/share/man/man1/freshclam.1.gz
[bob@pluto ~]$ whereis clamav
clamav: /usr/include/clamav.h /usr/share/clamav
[bob@pluto ~]$ whereis clamd
clamd: /usr/sbin/clamd /usr/sbin/clamd.amavisd /etc/clamd.d /etc/clamd.conf
/usr/share/man/man8/clamd.8.gz

===

After chown'ing the clamd.log and freshclam.log to clamav:clamav, it would
throw another error the next day.
But this doesn't treat the problem, just one of its symptoms. (as in time a
new 'bad' owned log will pop up)

===
New error message after chown'ing: (I assume it's trying to connect to the
clamd.sock, which isn't where it expects it to be)

/etc/cron.daily/freshclam:

connect(): No such file or directory

===

Contents of /etc/cron.daily/freshclam:

#!/bin/sh

### A simple update script for the clamav virus database.
### This could as well be replaced by a SysV script.

### fix log file if needed
LOG_FILE=/var/log/clamav/freshclam.log
if [ ! -f $LOG_FILE ]; then
touch $LOG_FILE
chmod 644 $LOG_FILE
chown clamav.amavis $LOG_FILE
fi

/usr/bin/freshclam \
--quiet \
--datadir=/var/lib/clamav \
--log=$LOG_FILE



Contents of related files that might provide insight:
-

/etc/clamd.conf (there's also a clamd.conf.rpmsave, clamd.conf.rpmnew)

## Example config file for the Clam AV daemon
## Please read the clamd.conf(5) manual before editing this file.
##


# Comment or remove the line below.
#Example

# Uncomment this option to enable logging.
# LogFile must be writable for the user running daemon.
# A full path is required.
# Default: disabled
LogFile /var/log/clamav/clamd.log

# By default the log file is locked for writing - the lock protects
against
# running clamd multiple times (if want to run another clamd, please
# copy the configuration file, change the LogFile variable, and run
# the daemon with --config-file option).
# This option disables log file locking.
# Default: no
#LogFileUnlock yes

# Maximum size of the log file.
# Value of 0 disables the limit.
# You may use 'M' or 'm' for megabytes (1M = 1m = 1048576 bytes)
# and 'K' or 'k' for kilobytes (1K = 1k = 1024 bytes). To specify the
size
# in bytes just don't use modifiers.
# Default: 1M
LogFileMaxSize 0

# Log time with each message.
# Default: no
LogTime yes

# Also log clean files. Useful in debugging but drastically increases
the
# log size.
# Default: no
#LogClean 

Re: [clamav-users] Freshclam error when trying to write to log file

[Peter Bonivart]

On Mon, Jun 3, 2013 at 1:57 PM, Wietse Jorissen
wietse.joris...@gmail.com wrote:
 -rw-r--r--. 1 clam   clam   0 jun  2 03:50 clamd.log
 -rw-r--r--. 1 clamav clamav 59314 mei 12 03:13 clamd.log-20130512
 -rw-r--r--. 1 clamav clamav 59926 mei 19 04:41 clamd.log-20130519
 -rw-r--r--. 1 clamav clamav 40383 mei 24 16:43 clamd.log-20130526
 -rw-r--r--. 1 clamav clamav  3295 mei 29 11:17 clamd.log-20130602
 -rw-r--r--. 1 clam   clam   0 jun  2 03:50 freshclam.log
 -rw-r--r--. 1 clamav clamav  6006 mei 12 03:13 freshclam.log-20130512
 -rw-r--r--. 1 clamav clamav  5940 mei 19 04:41 freshclam.log-20130519
 -rw-r--r--. 1 clamav clamav  3733 mei 26 03:50 freshclam.log-20130526
 -rw-r--r--. 1 clamav clamav  6274 jun  2 03:50 freshclam.log-20130602

You have the classic mess of ClamAV from two sources, one using clam
as the user and the other clamav. You need to sort out which packages
you want to use, remove the others and stick with it.
___
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq
http://www.clamav.net/support/ml

[clamav-users] Freshclam: Error creating socket

[Massimo Rossi]

Hi to all,


I'm having an issue updating clamav virus definitions on a CentOS 5 
server. When I launch freshclam I obtain ERROR: Can't create new socket. 
 Using clamav or root user doesn't resolve anything, same scenario 
changing permissions to 777 on /var/clamav or /var/run/clamav, same 
scenario changing database mirrors. 


This the complete error:
ERROR: Can't create new socket
WARNING: getpatch: Can't download daily-16682.cdiff from 
clamav.mirror.garr.it


This is the oputput of clamconf:

Checking configuration files in /etc

Config file: clamd.conf
---
LogFile disabled
LogFileUnlock disabled
LogFileMaxSize = 4294967295
LogTime = yes
LogClean disabled
LogSyslog = yes
LogFacility = LOG_LOCAL6
LogVerbose = yes
ExtendedDetectionInfo = yes
PidFile = /var/run/clamav/clamd.pid
TemporaryDirectory = /var/tmp
DatabaseDirectory = /var/clamav
OfficialDatabaseOnly disabled
LocalSocket = /var/run/clamav/clamd.sock
LocalSocketGroup disabled
LocalSocketMode disabled
FixStaleSocket = yes
TCPSocket = 3310
TCPAddr = 127.0.0.1
MaxConnectionQueueLength = 30
StreamMaxLength = 52428800
StreamMinPort = 1024
StreamMaxPort = 2048
MaxThreads = 50
ReadTimeout = 300
CommandReadTimeout = 5
SendBufTimeout = 500
MaxQueue = 100
IdleTimeout = 30
ExcludePath disabled
MaxDirectoryRecursion = 20
FollowDirectorySymlinks disabled
FollowFileSymlinks disabled
CrossFilesystems = yes
SelfCheck = 600
VirusEvent disabled
ExitOnOOM disabled
Foreground disabled
Debug disabled
LeaveTemporaryFiles disabled
User = clamav
AllowSupplementaryGroups = yes
Bytecode = yes
BytecodeSecurity = TrustSigned
BytecodeTimeout = 5000
BytecodeUnsigned disabled
BytecodeMode = Auto
DetectPUA disabled
ExcludePUA disabled
IncludePUA disabled
AlgorithmicDetection = yes
ScanPE = yes
ScanELF = yes
DetectBrokenExecutables = yes
ScanMail = yes
ScanPartialMessages = yes
PhishingSignatures = yes
PhishingScanURLs = yes
PhishingAlwaysBlockCloak disabled
PhishingAlwaysBlockSSLMismatch disabled
HeuristicScanPrecedence = yes
StructuredDataDetection disabled
StructuredMinCreditCardCount = 3
StructuredMinSSNCount = 3
StructuredSSNFormatNormal = yes
StructuredSSNFormatStripped disabled
ScanHTML = yes
ScanOLE2 = yes
OLE2BlockMacros disabled
ScanPDF = yes
ScanArchive = yes
ArchiveBlockEncrypted disabled
MaxScanSize = 157286400
MaxFileSize = 52428800
MaxRecursion = 16
MaxFiles = 1
ClamAuth disabled
ClamukoScanOnAccess disabled
ClamukoScannerCount = 3
ClamukoScanOnOpen disabled
ClamukoScanOnClose disabled
ClamukoScanOnExec disabled
ClamukoIncludePath disabled
ClamukoExcludePath disabled
ClamukoExcludeUID disabled
ClamukoMaxFileSize = 5242880
DevACOnly disabled
DevACDepth disabled
DevLiblog disabled

Config file: freshclam.conf
---
LogFileMaxSize = 1048576
LogTime disabled
LogSyslog = yes
LogFacility = LOG_LOCAL6
LogVerbose disabled
PidFile disabled
DatabaseDirectory = /var/clamav
Foreground disabled
Debug disabled
AllowSupplementaryGroups disabled
UpdateLogFile = /var/log/clamav/freshclam.log
DatabaseOwner = clamav
Checks = 12
DNSDatabaseInfo = current.cvd.clamav.net
DatabaseMirror = clamav.mirror.garr.it, clamav.linux.it
MaxAttempts = 3
ScriptedUpdates = yes
TestDatabases = yes
CompressLocalDatabase disabled
ExtraDatabase disabled
DatabaseCustomURL disabled
HTTPProxyServer disabled
HTTPProxyPort disabled
HTTPProxyUsername disabled
HTTPProxyPassword disabled
HTTPUserAgent disabled
NotifyClamd = /etc/clamd.conf
OnUpdateExecute disabled
OnErrorExecute disabled
OnOutdatedExecute disabled
LocalIPAddress disabled
ConnectTimeout = 30
ReceiveTimeout = 30
SubmitDetectionStats disabled
DetectionStatsCountry disabled
DetectionStatsHostID disabled
SafeBrowsing disabled
Bytecode = yes

clamav-milter.conf not found

Software settings
-
Version: 0.97.6
Optional features supported: MEMPOOL IPv6 CLAMUKO AUTOIT_EA06 BZIP2 RAR

Database information

Database directory: /var/clamav
bytecode.cld: version 214, sigs: 41, built on Wed Feb 13 16:29:15 2013
daily.cvd: version 16681, sigs: 766001, built on Thu Feb 14 13:55:37 2013
daily.cvd: WARNING: This database requires f-level 73 (current f-level: 
67)
main.cvd: version 54, sigs: 1044387, built on Tue Oct 11 16:34:20 2011
Total number of signatures: 1810429

Platform information

uname: Linux 2.6.18-348.1.1.el5 #1 SMP Tue Jan 22 16:24:03 EST 2013 i686
OS: linux-gnu, ARCH: i386, CPU: i386
Full OS version: CentOS release 5.9 (Final)
zlib version: 1.2.3 (1.2.3), compile flags: 55
platform id: 0x0a11434304040102

Build information
-
GNU C: 4.1.2 20080704 (Red Hat 4.1.2-51) (4.1.2)
CPPFLAGS:
CFLAGS: -O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions 
-fstack-protector --param=ssp-buffer-size=4 -m32 -march=i386 
-mtune=generic -fasynchronous-unwind-tables
CXXFLAGS: -O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions 
-fstack-protector --param=ssp-buffer-size=4 -m32 -march=i386 
-mtune=generic -fasynchronous-unwind-tables

Re: [clamav-users] Freshclam: Error creating socket

[Shawn Webb]

Can you paste the whole log, please?


On Mon, Feb 25, 2013 at 9:02 AM, Massimo Rossi massimo.ro...@sysdat.itwrote:

 Hi to all,


 I'm having an issue updating clamav virus definitions on a CentOS 5
 server. When I launch freshclam I obtain ERROR: Can't create new socket.
  Using clamav or root user doesn't resolve anything, same scenario
 changing permissions to 777 on /var/clamav or /var/run/clamav, same
 scenario changing database mirrors.


 This the complete error:
 ERROR: Can't create new socket
 WARNING: getpatch: Can't download daily-16682.cdiff from
 clamav.mirror.garr.it


 This is the oputput of clamconf:

 Checking configuration files in /etc

 Config file: clamd.conf
 ---
 LogFile disabled
 LogFileUnlock disabled
 LogFileMaxSize = 4294967295
 LogTime = yes
 LogClean disabled
 LogSyslog = yes
 LogFacility = LOG_LOCAL6
 LogVerbose = yes
 ExtendedDetectionInfo = yes
 PidFile = /var/run/clamav/clamd.pid
 TemporaryDirectory = /var/tmp
 DatabaseDirectory = /var/clamav
 OfficialDatabaseOnly disabled
 LocalSocket = /var/run/clamav/clamd.sock
 LocalSocketGroup disabled
 LocalSocketMode disabled
 FixStaleSocket = yes
 TCPSocket = 3310
 TCPAddr = 127.0.0.1
 MaxConnectionQueueLength = 30
 StreamMaxLength = 52428800
 StreamMinPort = 1024
 StreamMaxPort = 2048
 MaxThreads = 50
 ReadTimeout = 300
 CommandReadTimeout = 5
 SendBufTimeout = 500
 MaxQueue = 100
 IdleTimeout = 30
 ExcludePath disabled
 MaxDirectoryRecursion = 20
 FollowDirectorySymlinks disabled
 FollowFileSymlinks disabled
 CrossFilesystems = yes
 SelfCheck = 600
 VirusEvent disabled
 ExitOnOOM disabled
 Foreground disabled
 Debug disabled
 LeaveTemporaryFiles disabled
 User = clamav
 AllowSupplementaryGroups = yes
 Bytecode = yes
 BytecodeSecurity = TrustSigned
 BytecodeTimeout = 5000
 BytecodeUnsigned disabled
 BytecodeMode = Auto
 DetectPUA disabled
 ExcludePUA disabled
 IncludePUA disabled
 AlgorithmicDetection = yes
 ScanPE = yes
 ScanELF = yes
 DetectBrokenExecutables = yes
 ScanMail = yes
 ScanPartialMessages = yes
 PhishingSignatures = yes
 PhishingScanURLs = yes
 PhishingAlwaysBlockCloak disabled
 PhishingAlwaysBlockSSLMismatch disabled
 HeuristicScanPrecedence = yes
 StructuredDataDetection disabled
 StructuredMinCreditCardCount = 3
 StructuredMinSSNCount = 3
 StructuredSSNFormatNormal = yes
 StructuredSSNFormatStripped disabled
 ScanHTML = yes
 ScanOLE2 = yes
 OLE2BlockMacros disabled
 ScanPDF = yes
 ScanArchive = yes
 ArchiveBlockEncrypted disabled
 MaxScanSize = 157286400
 MaxFileSize = 52428800
 MaxRecursion = 16
 MaxFiles = 1
 ClamAuth disabled
 ClamukoScanOnAccess disabled
 ClamukoScannerCount = 3
 ClamukoScanOnOpen disabled
 ClamukoScanOnClose disabled
 ClamukoScanOnExec disabled
 ClamukoIncludePath disabled
 ClamukoExcludePath disabled
 ClamukoExcludeUID disabled
 ClamukoMaxFileSize = 5242880
 DevACOnly disabled
 DevACDepth disabled
 DevLiblog disabled

 Config file: freshclam.conf
 ---
 LogFileMaxSize = 1048576
 LogTime disabled
 LogSyslog = yes
 LogFacility = LOG_LOCAL6
 LogVerbose disabled
 PidFile disabled
 DatabaseDirectory = /var/clamav
 Foreground disabled
 Debug disabled
 AllowSupplementaryGroups disabled
 UpdateLogFile = /var/log/clamav/freshclam.log
 DatabaseOwner = clamav
 Checks = 12
 DNSDatabaseInfo = current.cvd.clamav.net
 DatabaseMirror = clamav.mirror.garr.it, clamav.linux.it
 MaxAttempts = 3
 ScriptedUpdates = yes
 TestDatabases = yes
 CompressLocalDatabase disabled
 ExtraDatabase disabled
 DatabaseCustomURL disabled
 HTTPProxyServer disabled
 HTTPProxyPort disabled
 HTTPProxyUsername disabled
 HTTPProxyPassword disabled
 HTTPUserAgent disabled
 NotifyClamd = /etc/clamd.conf
 OnUpdateExecute disabled
 OnErrorExecute disabled
 OnOutdatedExecute disabled
 LocalIPAddress disabled
 ConnectTimeout = 30
 ReceiveTimeout = 30
 SubmitDetectionStats disabled
 DetectionStatsCountry disabled
 DetectionStatsHostID disabled
 SafeBrowsing disabled
 Bytecode = yes

 clamav-milter.conf not found

 Software settings
 -
 Version: 0.97.6
 Optional features supported: MEMPOOL IPv6 CLAMUKO AUTOIT_EA06 BZIP2 RAR

 Database information
 
 Database directory: /var/clamav
 bytecode.cld: version 214, sigs: 41, built on Wed Feb 13 16:29:15 2013
 daily.cvd: version 16681, sigs: 766001, built on Thu Feb 14 13:55:37 2013
 daily.cvd: WARNING: This database requires f-level 73 (current f-level:
 67)
 main.cvd: version 54, sigs: 1044387, built on Tue Oct 11 16:34:20 2011
 Total number of signatures: 1810429

 Platform information
 
 uname: Linux 2.6.18-348.1.1.el5 #1 SMP Tue Jan 22 16:24:03 EST 2013 i686
 OS: linux-gnu, ARCH: i386, CPU: i386
 Full OS version: CentOS release 5.9 (Final)
 zlib version: 1.2.3 (1.2.3), compile flags: 55
 platform id: 0x0a11434304040102

 Build information
 -
 GNU C: 4.1.2 20080704 (Red Hat 4.1.2-51) (4.1.2)
 CPPFLAGS:
 CFLAGS: -O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions
 

Re: [clamav-users] Freshclam: Error creating socket

[Massimo Rossi]

[root@relay01 ~]# freshclam --debug
ClamAV update process started at Mon Feb 25 15:21:15 2013
main.cvd is up to date (version: 54, sigs: 1044387, f-level: 60, builder: 
sven)
LibClamAV debug: in cli_untgz()
LibClamAV debug: cli_untgz: Unpacking 
/var/clamav/clamav-fd74978ee43150acf161bb889f833ec1/clamav-ce91721efd4d1c2a529836b9add3c7ed/COPYING
LibClamAV debug: cli_untgz: Unpacking 
/var/clamav/clamav-fd74978ee43150acf161bb889f833ec1/clamav-ce91721efd4d1c2a529836b9add3c7ed/daily.info
LibClamAV debug: cli_untgz: Unpacking 
/var/clamav/clamav-fd74978ee43150acf161bb889f833ec1/clamav-ce91721efd4d1c2a529836b9add3c7ed/daily.cfg
LibClamAV debug: cli_untgz: Unpacking 
/var/clamav/clamav-fd74978ee43150acf161bb889f833ec1/clamav-ce91721efd4d1c2a529836b9add3c7ed/daily.ign
LibClamAV debug: cli_untgz: Unpacking 
/var/clamav/clamav-fd74978ee43150acf161bb889f833ec1/clamav-ce91721efd4d1c2a529836b9add3c7ed/daily.ign2
LibClamAV debug: cli_untgz: Unpacking 
/var/clamav/clamav-fd74978ee43150acf161bb889f833ec1/clamav-ce91721efd4d1c2a529836b9add3c7ed/daily.ftm
LibClamAV debug: cli_untgz: Unpacking 
/var/clamav/clamav-fd74978ee43150acf161bb889f833ec1/clamav-ce91721efd4d1c2a529836b9add3c7ed/daily.db
LibClamAV debug: cli_untgz: Unpacking 
/var/clamav/clamav-fd74978ee43150acf161bb889f833ec1/clamav-ce91721efd4d1c2a529836b9add3c7ed/daily.hdb
LibClamAV debug: cli_untgz: Unpacking 
/var/clamav/clamav-fd74978ee43150acf161bb889f833ec1/clamav-ce91721efd4d1c2a529836b9add3c7ed/daily.hdu
LibClamAV debug: cli_untgz: Unpacking 
/var/clamav/clamav-fd74978ee43150acf161bb889f833ec1/clamav-ce91721efd4d1c2a529836b9add3c7ed/daily.mdb
LibClamAV debug: cli_untgz: Unpacking 
/var/clamav/clamav-fd74978ee43150acf161bb889f833ec1/clamav-ce91721efd4d1c2a529836b9add3c7ed/daily.mdu
LibClamAV debug: cli_untgz: Unpacking 
/var/clamav/clamav-fd74978ee43150acf161bb889f833ec1/clamav-ce91721efd4d1c2a529836b9add3c7ed/daily.ndb
LibClamAV debug: cli_untgz: Unpacking 
/var/clamav/clamav-fd74978ee43150acf161bb889f833ec1/clamav-ce91721efd4d1c2a529836b9add3c7ed/daily.ndu
LibClamAV debug: cli_untgz: Unpacking 
/var/clamav/clamav-fd74978ee43150acf161bb889f833ec1/clamav-ce91721efd4d1c2a529836b9add3c7ed/daily.ldb
LibClamAV debug: cli_untgz: Unpacking 
/var/clamav/clamav-fd74978ee43150acf161bb889f833ec1/clamav-ce91721efd4d1c2a529836b9add3c7ed/daily.ldu
LibClamAV debug: cli_untgz: Unpacking 
/var/clamav/clamav-fd74978ee43150acf161bb889f833ec1/clamav-ce91721efd4d1c2a529836b9add3c7ed/daily.zmd
LibClamAV debug: cli_untgz: Unpacking 
/var/clamav/clamav-fd74978ee43150acf161bb889f833ec1/clamav-ce91721efd4d1c2a529836b9add3c7ed/daily.idb
LibClamAV debug: cli_untgz: Unpacking 
/var/clamav/clamav-fd74978ee43150acf161bb889f833ec1/clamav-ce91721efd4d1c2a529836b9add3c7ed/daily.fp
LibClamAV debug: cli_untgz: Unpacking 
/var/clamav/clamav-fd74978ee43150acf161bb889f833ec1/clamav-ce91721efd4d1c2a529836b9add3c7ed/daily.pdb
LibClamAV debug: cli_untgz: Unpacking 
/var/clamav/clamav-fd74978ee43150acf161bb889f833ec1/clamav-ce91721efd4d1c2a529836b9add3c7ed/daily.wdb
LibClamAV debug: cli_untgz: Unpacking 
/var/clamav/clamav-fd74978ee43150acf161bb889f833ec1/clamav-ce91721efd4d1c2a529836b9add3c7ed/daily.crtdb
ERROR: Can't create new socket
WARNING: getpatch: Can't download daily-16682.cdiff from 
clamav.mirror.garr.it
ERROR: Can't create new socket
WARNING: getpatch: Can't download daily-16682.cdiff from 
clamav.mirror.garr.it
ERROR: Can't create new socket
WARNING: getpatch: Can't download daily-16682.cdiff from 
clamav.mirror.garr.it
WARNING: Incremental update failed, trying to download daily.cvd
ERROR: Can't create new socket
WARNING: Can't download daily.cvd from clamav.mirror.garr.it
Trying again in 5 secs...


 Dott. Massimo Rossi

 Via Meucci 22 – Fraz. Ospedaletto - 56121 Pisa
 tel. + 39 050 975178   mob. + 39 335 6675699 
 www.sysdat.it



From:   Shawn Webb sw...@sourcefire.com
To: ClamAV users ML clamav-users@lists.clamav.net, 
Date:   25/02/2013 15.20
Subject:Re: [clamav-users] Freshclam: Error creating socket
Sent by:clamav-users-boun...@lists.clamav.net



Can you paste the whole log, please?


On Mon, Feb 25, 2013 at 9:02 AM, Massimo Rossi 
massimo.ro...@sysdat.itwrote:

 Hi to all,


 I'm having an issue updating clamav virus definitions on a CentOS 5
 server. When I launch freshclam I obtain ERROR: Can't create new 
socket.
  Using clamav or root user doesn't resolve anything, same scenario
 changing permissions to 777 on /var/clamav or /var/run/clamav, same
 scenario changing database mirrors.


 This the complete error:
 ERROR: Can't create new socket
 WARNING: getpatch: Can't download daily-16682.cdiff from
 clamav.mirror.garr.it


 This is the oputput of clamconf:

 Checking configuration files in /etc

 Config file: clamd.conf
 ---
 LogFile disabled
 LogFileUnlock disabled
 LogFileMaxSize = 4294967295
 LogTime = yes
 LogClean disabled
 LogSyslog = yes
 LogFacility = LOG_LOCAL6
 LogVerbose = yes
 ExtendedDetectionInfo = yes
 PidFile = /var/run

Re: [clamav-users] Freshclam: Error creating socket

[Shawn Webb]

On Mon, Feb 25, 2013 at 9:22 AM, Massimo Rossi massimo.ro...@sysdat.itwrote:

 ERROR: Can't create new socket
 WARNING: getpatch: Can't download daily-16682.cdiff from
 clamav.mirror.garr.it
 ERROR: Can't create new socket
 WARNING: getpatch: Can't download daily-16682.cdiff from
 clamav.mirror.garr.it
 ERROR: Can't create new socket
 WARNING: getpatch: Can't download daily-16682.cdiff from
 clamav.mirror.garr.it
 WARNING: Incremental update failed, trying to download daily.cvd
 ERROR: Can't create new socket
 WARNING: Can't download daily.cvd from clamav.mirror.garr.it
 Trying again in 5 secs...


There is only one place in all of the freshclam code where this error
message occurs. The call to socket() is failing. One of two things is
happening:
1) Your machine has either run out of available sockets or available file
descriptors.
2) Something is wrong with the IPv6 setup on your machine, and it is trying
IPv6 and failing.
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Re: [clamav-users] Freshclam: Error creating socket

[Benny Pedersen]

Shawn Webb skrev den 25-02-2013 15:19:

Can you paste the whole log, please?


if its even in GigaByte sizes ?, hoppefully it will be done on pastebin 
with a link here, if thats make a diff for some

___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

[clamav-users] Freshclam - ERROR: SubmitDetectionStats: Can't read from socket

[Chris]

Twice this evening I've received errors, both when freshclam was trying
to submit detection stats. The first one was:

ERROR: SubmitDetectionStats: Remote server reported temporary failure:
SUBMIT_TEMPORARY_FAILURE:Server not available, try again later

And the 2nd was as is in the subject line. 
Thought someone would like to know.

Chris

-- 
Chris
KeyID 0xE372A7DA98E6705C
31.11°N 97.89°W (Elev. 1092 ft)



signature.asc
Description: This is a digitally signed message part
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Re: [Clamav-users] Freshclam error

[Török Edwin]

On 2009-08-28 18:11, Scott Mohnkern wrote:
 I don't think this posted to the list:
   

It did.

 Well I figured it out, apparmor is on the box, and I'd really rather not
 disable it.
   

You don't have to disable apparmor, just change the apparmor policy.
The ubuntu wiki has a short description of how to do that, but if you're
using
an ubuntu package, I think you should open a bug on launchpad.

 I've currently got CLAMAV 0.95.1 installed (its the most recent backport)
 but I think it 0.95.2 that fixes this problem, but I can't find a repository
 for it anywhere.  Is there a repository (or .deb files) that I could
 download and install?
   

I see 0.95.2 packages at the bottom of this page:
https://launchpad.net/~ubuntu-clamav/+archive/ppa

Best regards,
--Edwin
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Re: [Clamav-users] Freshclam error

[Scott Mohnkern]

I don't think this posted to the list:
Well I figured it out, apparmor is on the box, and I'd really rather not
disable it.
I've currently got CLAMAV 0.95.1 installed (its the most recent backport)
but I think it 0.95.2 that fixes this problem, but I can't find a repository
for it anywhere.  Is there a repository (or .deb files) that I could
download and install?
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Re: [Clamav-users] Freshclam error

[Scott Mohnkern]

Well I figured it out, apparmor is on the box, and I'd really rather not
disable it.
I've currently got CLAMAV 0.95.1 installed (its the most recent backport)
but I think it 0.95.2 that fixes this problem, but I can't find a repository
for it anywhere.  Is there a repository (or .deb files) that I could
download and install?



2009/8/25 Török Edwin edwinto...@gmail.com

 On 2009-08-24 22:24, Scott Mohnkern wrote:
  r...@zambezi:/var/clamav# freshclam -u clamav
  ClamAV update process started at Mon Aug 24 15:23:23 2009
  WARNING: Your ClamAV installation is OUTDATED!
  WARNING: Local version: 0.94.2 Recommended version: 0.95.2
  DON'T PANIC! Read http://www.clamav.net/support/faq
  ERROR: getfile: Can't create new file
  /var/clamav/clamav-d87ce240d56bd3e14a8c61c10aecc45e in /var/clamav
  Hint: The database directory must be writable for UID 441 or GID 204
  WARNING: Can't download main.cvd from db.us.clamav.net
 
  This isn't a box I built, is there a way to check to see if selinux is
  running on it?  (That would have this effect).
 
  I'm really only familiar with selinux on RHEL5 boxes.
 
 

 Look in dmesg: dmesg | grep -i selinux

 Also try running:
 strace freshclam 2log

 And look in dmesg for any avc messages.

 If you have SELinux try:
 ls -lZd /var/clamav
 ls -lZ `which freshclam`

 Best regards,
 --Edwin
 ___
 Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
 http://www.clamav.net/support/ml




-- 
Scott Mohnkern
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Re: [Clamav-users] Freshclam error

[Török Edwin]

On 2009-08-24 22:24, Scott Mohnkern wrote:
 r...@zambezi:/var/clamav# freshclam -u clamav
 ClamAV update process started at Mon Aug 24 15:23:23 2009
 WARNING: Your ClamAV installation is OUTDATED!
 WARNING: Local version: 0.94.2 Recommended version: 0.95.2
 DON'T PANIC! Read http://www.clamav.net/support/faq
 ERROR: getfile: Can't create new file
 /var/clamav/clamav-d87ce240d56bd3e14a8c61c10aecc45e in /var/clamav
 Hint: The database directory must be writable for UID 441 or GID 204
 WARNING: Can't download main.cvd from db.us.clamav.net

 This isn't a box I built, is there a way to check to see if selinux is
 running on it?  (That would have this effect).

 I'm really only familiar with selinux on RHEL5 boxes.

   

Look in dmesg: dmesg | grep -i selinux

Also try running:
strace freshclam 2log

And look in dmesg for any avc messages.

If you have SELinux try:
ls -lZd /var/clamav
ls -lZ `which freshclam`

Best regards,
--Edwin
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Re: [Clamav-users] Freshclam error

[Török Edwin]

On 2009-08-24 22:25, Scott Mohnkern wrote:
 I bet that selinux is running on here.  Found this in /var/log/syslog
 Aug 24 15:23:25 zambezi kernel: [354946.311148] audit(1251141805.476:58):
 type=1503 operation=inode_create requested_mask=w:: denied_mask=w::
 name=/var/clamav/clamav-d87ce240d56bd3e14a8c61c10aecc45e pid=6125
 profile=/usr/bin/freshclam namespace=default

   

For Ubuntu that may be Apparmor, see here:
https://wiki.ubuntu.com/DebuggingApparmor

Best regards,
--Edwin
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Re: [Clamav-users] Freshclam error

[Scott Mohnkern]

Well, here's what I found:
[   43.356010] SELinux:  Disabled at boot.


dmesg | grep avc came up blank






2009/8/25 Török Edwin edwinto...@gmail.com

 On 2009-08-24 22:24, Scott Mohnkern wrote:
  r...@zambezi:/var/clamav# freshclam -u clamav
  ClamAV update process started at Mon Aug 24 15:23:23 2009
  WARNING: Your ClamAV installation is OUTDATED!
  WARNING: Local version: 0.94.2 Recommended version: 0.95.2
  DON'T PANIC! Read http://www.clamav.net/support/faq
  ERROR: getfile: Can't create new file
  /var/clamav/clamav-d87ce240d56bd3e14a8c61c10aecc45e in /var/clamav
  Hint: The database directory must be writable for UID 441 or GID 204
  WARNING: Can't download main.cvd from db.us.clamav.net
 
  This isn't a box I built, is there a way to check to see if selinux is
  running on it?  (That would have this effect).
 
  I'm really only familiar with selinux on RHEL5 boxes.
 
 

 Look in dmesg: dmesg | grep -i selinux

 Also try running:
 strace freshclam 2log

 And look in dmesg for any avc messages.

 If you have SELinux try:
 ls -lZd /var/clamav
 ls -lZ `which freshclam`

 Best regards,
 --Edwin
 ___
 Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
 http://www.clamav.net/support/ml




-- 
Scott Mohnkern
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Re: [Clamav-users] Freshclam Error

[Gian Carlo]

On Tue, Aug 25, 2009 at 11:04:30AM -0400, Carlos Williams wrote:

  - /etc/init.d/clamav-freshclam restart
 
 So if I manually run the 'freshclam' daemon, then it will lock it up?
The log is locked by the daemon.

 Should I never manually run this and just let the 'cron' job to auto
 update this?
Updates are performed by the daemon, not via a cron job, if you chose so
during installation.
You can fine tune it with the Checks parameter in
/etc/clamav/freshclam.conf.

If you chose to update via cron job, the script
/etc/init.d/clamav-freshclam says:
If user wants it run from cron, we only accept no-daemon and stop

Ciao,
gc :-)

___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

[Clamav-users] Freshclam Error

[Carlos Williams]

I noticed this morning on my Debian mail server that when I attempt to
run the freshclam command from the CLI, I get the following error:

mail:~# freshclam
ERROR: /var/log/clamav/freshclam.log is locked by another process
ERROR: Problem with internal logger (UpdateLogFile =
/var/log/clamav/freshclam.log).

I then check out the logs...

--
Received signal: wake up
ClamAV update process started at Mon Aug 24 09:25:35 2009
main.cvd is up to date (version: 51, sigs: 545035, f-level: 42, builder: sven)
Downloading daily-9731.cdiff [100%]
daily.cld updated (version: 9731, sigs: 67641, f-level: 43, builder: arnaud)
Database updated (612676 signatures) from db.local.clamav.net (IP:
64.142.100.50)
Clamd successfully notified about the update.
--
Received signal: wake up
ClamAV update process started at Mon Aug 24 10:25:37 2009
main.cvd is up to date (version: 51, sigs: 545035, f-level: 42, builder: sven)
Trying host db.local.clamav.net (207.57.106.31)...
Downloading daily-9732.cdiff [100%]
daily.cld updated (version: 9732, sigs: 67902, f-level: 43, builder: ccordes)
Database updated (612937 signatures) from db.local.clamav.net (IP:
207.57.106.31)
Clamd successfully notified about the update.
--
Received signal: wake up
ClamAV update process started at Mon Aug 24 11:25:39 2009
main.cvd is up to date (version: 51, sigs: 545035, f-level: 42, builder: sven)
daily.cld is up to date (version: 9732, sigs: 67902, f-level: 43,
builder: ccordes)
--
Received signal: wake up
ClamAV update process started at Mon Aug 24 12:25:39 2009
main.cvd is up to date (version: 51, sigs: 545035, f-level: 42, builder: sven)
daily.cld is up to date (version: 9732, sigs: 67902, f-level: 43,
builder: ccordes)
--

Does anyone know what is causing the error when I try and run
freshclam manually? It appears to happen every hour automatically
but I would think that I can force it whenever I please as well, no?

I am running the following:

mail:~# apt-cache policy clamav
clamav:
 Installed: 0.95.2+dfsg-1~volatile1
 Candidate: 0.95.2+dfsg-1~volatile1
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Re: [Clamav-users] Freshclam error

[Carlos Williams]

On Mon, Aug 24, 2009 at 12:46 PM, Scott Mohnkernmohnk...@gmail.com wrote:
 I recently installed clamav .94 on an ubuntu box (8.04) and clamscan runs
 just fine, however freshclam generates the following error:


 rwxrwxrwx  2 clamav   204  4096 2009-08-21 10:02 clamav

Why is your GID '204'? That looks to me like the system can't
recognize the group ownership of the file or parenting folder...
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Re: [Clamav-users] Freshclam error

[Scott Mohnkern]

Thanks for catching that, I'd accidentally set the clamav group number to
441.  However, after correcting.  I'm still seeing the problem:
o...@zambezi:/var# ls -alt | grep clamav
drwxrwxrwx  2 clamav clamav  4096 2009-08-21 10:02 clamav


r...@zambezi:/var# freshclam
ClamAV update process started at Mon Aug 24 12:54:47 2009
WARNING: Your ClamAV installation is OUTDATED!
WARNING: Local version: 0.94.2 Recommended version: 0.95.2
DON'T PANIC! Read http://www.clamav.net/support/faq
ERROR: getfile: Can't create new file
/var/clamav/clamav-37cffbcbac17f3fecf92527459691294 in /var/clamav
Hint: The database directory must be writable for UID 441 or GID 204
WARNING: Can't download main.cvd from db.us.clamav.net



On Mon, Aug 24, 2009 at 12:51 PM, Carlos Williams carlosw...@gmail.comwrote:

 On Mon, Aug 24, 2009 at 12:46 PM, Scott Mohnkernmohnk...@gmail.com
 wrote:
  I recently installed clamav .94 on an ubuntu box (8.04) and clamscan runs
  just fine, however freshclam generates the following error:
 
 
  rwxrwxrwx  2 clamav   204  4096 2009-08-21 10:02 clamav

 Why is your GID '204'? That looks to me like the system can't
 recognize the group ownership of the file or parenting folder...
 ___
 Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
 http://www.clamav.net/support/ml




-- 
Scott Mohnkern
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Re: [Clamav-users] Freshclam error

[Rob MacGregor]

On Mon, Aug 24, 2009 at 17:55, Scott Mohnkernmohnk...@gmail.com wrote:
 Thanks for catching that, I'd accidentally set the clamav group number to
 441.  However, after correcting.  I'm still seeing the problem:
 o...@zambezi:/var# ls -alt | grep clamav
 drwxrwxrwx  2 clamav clamav  4096 2009-08-21 10:02 clamav

 r...@zambezi:/var# freshclam
 ClamAV update process started at Mon Aug 24 12:54:47 2009
 WARNING: Your ClamAV installation is OUTDATED!
 WARNING: Local version: 0.94.2 Recommended version: 0.95.2
 DON'T PANIC! Read http://www.clamav.net/support/faq
 ERROR: getfile: Can't create new file
 /var/clamav/clamav-37cffbcbac17f3fecf92527459691294 in /var/clamav
 Hint: The database directory must be writable for UID 441 or GID 204

What do the following show:

ls -lnd /var/clamav
id clamav

-- 
 Please keep list traffic on the list.

Rob MacGregor
  Whoever fights monsters should see to it that in the process he
doesn't become a monster.  Friedrich Nietzsche
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Re: [Clamav-users] Freshclam error

[Scott Mohnkern]

r...@zambezi:/var# ls -lnd /var/clamav
drwxrwxrwx 2 441 204 4096 2009-08-21 10:02 /var/clamav
r...@zambezi:/var# id clamav
uid=441(clamav) gid=204(clamav) groups=204(clamav)





On Mon, Aug 24, 2009 at 1:15 PM, Rob MacGregor rob.macgre...@gmail.comwrote:

 ls -lnd /var/clamav




-- 
Scott Mohnkern
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Re: [Clamav-users] Freshclam error

[Rob MacGregor]

On Mon, Aug 24, 2009 at 18:17, Scott Mohnkernmohnk...@gmail.com wrote:
 r...@zambezi:/var# ls -lnd /var/clamav
 drwxrwxrwx 2 441 204 4096 2009-08-21 10:02 /var/clamav
 r...@zambezi:/var# id clamav
 uid=441(clamav) gid=204(clamav) groups=204(clamav)

Try changing it to 770 instead of 777.  If that doesn't work, what
other kernel modules do you have loaded (apparmour etc)?

-- 
 Please keep list traffic on the list.

Rob MacGregor
  Whoever fights monsters should see to it that in the process he
doesn't become a monster.  Friedrich Nietzsche
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Re: [Clamav-users] Freshclam error

[Scott Mohnkern]

Did the 770, no luck.  Here's the results of lsmod:
Module  Size  Used by
af_packet  34440  2
ppdev  18568  0
acpi_cpufreq   18448  3
cpufreq_stats  16032  0
cpufreq_powersave  10368  0
cpufreq_ondemand   18320  2
freq_table 14080  3 acpi_cpufreq,cpufreq_stats,cpufreq_ondemand
cpufreq_userspace  14468  0
cpufreq_conservative17800  0
iptable_filter 11776  0
ip_tables  31720  1 iptable_filter
x_tables   30728  1 ip_tables
ac 15496  0
parport_pc 48296  0
lp 22084  0
parport51340  3 ppdev,parport_pc,lp
loop   28676  0
nfs   298872  1
lockd  83248  2 nfs
nfs_acl12416  1 nfs
sunrpc220808  10 nfs,lockd,nfs_acl
container  13824  0
iTCO_wdt   22480  0
button 18080  0
pcspkr 12160  0
evdev  22144  3
iTCO_vendor_support12932  1 iTCO_wdt
shpchp 45340  0
pci_hotplug41776  1 shpchp
ext3  156176  7
jbd64168  1 ext3
mbcache18560  1 ext3
sg 48920  0
sr_mod 27300  0
cdrom  48680  1 sr_mod
sd_mod 40448  12
pata_acpi  17024  0
usbhid 42848  0
hid52160  1 usbhid
ata_piix   31364  10
ata_generic17156  0
libata183984  3 pata_acpi,ata_piix,ata_generic
ehci_hcd   49164  0
scsi_mod  185784  4 sg,sr_mod,sd_mod,libata
tg3   131972  0
uhci_hcd   37024  0
usbcore   177200  4 usbhid,ehci_hcd,uhci_hcd
raid10 33536  0
raid456   138272  0
async_xor  13312  1 raid456
async_memcpy   11776  1 raid456
async_tx   17652  3 raid456,async_xor,async_memcpy
xor14352  2 raid456,async_xor
raid1  33920  5
raid0  16640  0
multipath  18176  0
linear 14592  0
md_mod 95388  11 raid10,raid456,raid1,raid0,multipath,linear
dm_mirror  33408  0
dm_snapshot27848  0
dm_mod 78200  11 dm_mirror,dm_snapshot
thermal26912  0
processor  48712  2 acpi_cpufreq,thermal
fan13960  0
fbcon  53504  0
tileblit   11392  1 fbcon
font   17280  1 fbcon
bitblit14592  1 fbcon
softcursor 10880  1 bitblit
fuse   63280  1



On Mon, Aug 24, 2009 at 1:27 PM, Rob MacGregor rob.macgre...@gmail.comwrote:

 On Mon, Aug 24, 2009 at 18:17, Scott Mohnkernmohnk...@gmail.com wrote:
  r...@zambezi:/var# ls -lnd /var/clamav
  drwxrwxrwx 2 441 204 4096 2009-08-21 10:02 /var/clamav
  r...@zambezi:/var# id clamav
  uid=441(clamav) gid=204(clamav) groups=204(clamav)

 Try changing it to 770 instead of 777.  If that doesn't work, what
 other kernel modules do you have loaded (apparmour etc)?

 --
 Please keep list traffic on the list.

 Rob MacGregor
  Whoever fights monsters should see to it that in the process he
doesn't become a monster.  Friedrich Nietzsche
 ___
 Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
 http://www.clamav.net/support/ml




-- 
Scott Mohnkern
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Re: [Clamav-users] Freshclam error

[Scott Mohnkern]

Plenty of space:
r...@zambezi:/var# df -h /var/clamav
FilesystemSize  Used Avail Use% Mounted on
/dev/mapper/vg00-var   10G  817M  8.7G   9% /var
r...@zambezi:/var# df -i /var/clamav
FilesystemInodes   IUsed   IFree IUse% Mounted on
/dev/mapper/vg00-var  6553608580  6467802% /var



On Mon, Aug 24, 2009 at 1:55 PM, Rob MacGregor rob.macgre...@gmail.comwrote:

 df -h /var/clamav
 df -i /var/clamav




-- 
Scott Mohnkern
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Re: [Clamav-users] Freshclam error

[Luis Carlos Ferreira]

attach the ouput of

mount

and try

mount -oremount,rw /var
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Re: [Clamav-users] Freshclam error

[Scott Mohnkern]

r...@zambezi:~# mount
/dev/md4 on / type ext3 (rw,relatime,errors=remount-ro)
proc on /proc type proc (rw,noexec,nosuid,nodev)
/sys on /sys type sysfs (rw,noexec,nosuid,nodev)
varrun on /var/run type tmpfs (rw,noexec,nosuid,nodev,mode=0755)
varlock on /var/lock type tmpfs (rw,noexec,nosuid,nodev,mode=1777)
udev on /dev type tmpfs (rw,mode=0755)
devshm on /dev/shm type tmpfs (rw)
devpts on /dev/pts type devpts (rw,gid=5,mode=620)
/dev/md0 on /boot type ext3 (rw,relatime)
/dev/mapper/vg00-opt on /opt type ext3 (rw,relatime)
/dev/md3 on /tmp type ext3 (rw,relatime)
/dev/mapper/vg00-usr on /usr type ext3 (rw,relatime)
/dev/mapper/vg00-var on /var type ext3 (rw,relatime)
/dev/mapper/vg00-var_log on /var/log type ext3 (rw,relatime)
securityfs on /sys/kernel/security type securityfs (rw)
140.90.91.244:/fs/shared on /fs/shared type nfs
(rw,soft,intr,udp,addr=140.90.91
.244)

r...@zambezi:~# mount -oremount,rw /var
r...@zambezi:~# freshclam
ClamAV update process started at Mon Aug 24 15:12:43 2009
WARNING: Your ClamAV installation is OUTDATED!
WARNING: Local version: 0.94.2 Recommended version: 0.95.2
DON'T PANIC! Read http://www.clamav.net/support/faq
ERROR: getfile: Can't create new file
/var/clamav/clamav-bacf717578a2fe08ad86b7f
  e7f7a38ab in /var/clamav
Hint: The database directory must be writable for UID 441 or GID 204
WARNING: Can't download main.cvd from db.us.clamav.net
r...@zambezi:~#


On Mon, Aug 24, 2009 at 2:56 PM, Luis Carlos Ferreira l...@tuxedo.com.arwrote:

 mount -oremount,rw /var




-- 
Scott Mohnkern
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Re: [Clamav-users] Freshclam error

[Luis Carlos Ferreira]

try

 freshclam -u clamav
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Re: [Clamav-users] Freshclam error

[Scott Mohnkern]

r...@zambezi:/var/clamav# freshclam -u clamav
ClamAV update process started at Mon Aug 24 15:23:23 2009
WARNING: Your ClamAV installation is OUTDATED!
WARNING: Local version: 0.94.2 Recommended version: 0.95.2
DON'T PANIC! Read http://www.clamav.net/support/faq
ERROR: getfile: Can't create new file
/var/clamav/clamav-d87ce240d56bd3e14a8c61c10aecc45e in /var/clamav
Hint: The database directory must be writable for UID 441 or GID 204
WARNING: Can't download main.cvd from db.us.clamav.net

This isn't a box I built, is there a way to check to see if selinux is
running on it?  (That would have this effect).

I'm really only familiar with selinux on RHEL5 boxes.


Scott



On Mon, Aug 24, 2009 at 3:21 PM, Luis Carlos Ferreira l...@tuxedo.com.arwrote:

 try

  freshclam -u clamav
 ___
 Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
 http://www.clamav.net/support/ml




-- 
Scott Mohnkern
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Re: [Clamav-users] Freshclam error

[Scott Mohnkern]

I bet that selinux is running on here.  Found this in /var/log/syslog
Aug 24 15:23:25 zambezi kernel: [354946.311148] audit(1251141805.476:58):
type=1503 operation=inode_create requested_mask=w:: denied_mask=w::
name=/var/clamav/clamav-d87ce240d56bd3e14a8c61c10aecc45e pid=6125
profile=/usr/bin/freshclam namespace=default


On Mon, Aug 24, 2009 at 12:46 PM, Scott Mohnkern mohnk...@gmail.com wrote:

 I recently installed clamav .94 on an ubuntu box (8.04) and clamscan runs
 just fine, however freshclam generates the following error:

 rwxrwxrwx  2 clamav   204  4096 2009-08-21 10:02 clamav
 r...@zambezi:/var# freshclam
 ClamAV update process started at Fri Aug 21 10:07:15 2009
 WARNING: Your ClamAV installation is OUTDATED!
 WARNING: Local version: 0.94.2 Recommended version: 0.95.2
 DON'T PANIC! Read http://www.clamav.net/support/faq
 ERROR: getfile: Can't create new file
 /var/clamav/clamav-4c8bad43f85f4c58ba20de0e76a60468 in /var/clamav
 Hint: The database directory must be writable for UID 441 or GID 204
 WARNING: Can't download main.cvd from db.us.clamav.net



 There's a user clamav, and /var/clamav is owned by 441:204 with write
 permissions. I can also su to user clamav and touch (create) new files in
 /var/clamav.


 Anyone have any ideas?




-- 
Scott Mohnkern
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Re: [Clamav-users] Freshclam Error

[Gian Carlo]

On Mon, Aug 24, 2009 at 12:43:03PM -0400, Carlos Williams wrote:
 I noticed this morning on my Debian mail server that when I attempt to
 run the freshclam command from the CLI, I get the following error:
 
 mail:~# freshclam
 ERROR: /var/log/clamav/freshclam.log is locked by another process
 ERROR: Problem with internal logger (UpdateLogFile =
 /var/log/clamav/freshclam.log).

[...]

 Does anyone know what is causing the error when I try and run
 freshclam manually? It appears to happen every hour automatically
 but I would think that I can force it whenever I please as well, no?
To force the updating process in Debian, usually, you have to restart
the daemon (that is locking the log file):

 - /etc/init.d/clamav-freshclam restart

Ciao,
gc :-)

___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Re: [Clamav-users] freshclam - ERROR: Can't lock database directory:-stale .dbLock file

[Tomasz Kojm]

On Mon, 26 Feb 2007 23:41:39 -0800
Dennis Peterson [EMAIL PROTECTED] wrote:

 Wolf, Brian wrote:
  Brian wrote:
  
  both freshclam and clamd 0.90 have been dying with
  Can't lock database directory every time a new 
  version of signatures comes out.  
  
  
  It looks like my problem was caused by having freshclam run 
  a script after an update using the OnUpdateExecute line in 
  freshclam.conf.  The script created a file containing the EICAR 
  pattern and then scanned it with 
  
 cat /tmp/eicar.com | /usr/local/bin/clamscan --quiet -
  
  Once I removed the clamscan command, the error went away.  This
  command worked okay in previous versions.
 
 I get that same error and I don't run a script. Still haven't figured it 
 out.

Does it occur with each run of freshclam?

-- 
   oo. Tomasz Kojm [EMAIL PROTECTED]
  (\/)\. http://www.ClamAV.net/gpg/tkojm.gpg
 \..._ 0DCA5A08407D5288279DB43454822DC8985A444B
   //\   /\  Tue Feb 27 10:09:52 CET 2007
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html

Re: [Clamav-users] freshclam - ERROR: Can't lock database directory:-stale .dbLock file

[Dennis Peterson]

Tomasz Kojm wrote:

On Mon, 26 Feb 2007 23:41:39 -0800
Dennis Peterson [EMAIL PROTECTED] wrote:


Wolf, Brian wrote:

Brian wrote:


both freshclam and clamd 0.90 have been dying with
Can't lock database directory every time a new 
version of signatures comes out.  


It looks like my problem was caused by having freshclam run 
a script after an update using the OnUpdateExecute line in 
freshclam.conf.  The script created a file containing the EICAR 
pattern and then scanned it with 


   cat /tmp/eicar.com | /usr/local/bin/clamscan --quiet -

Once I removed the clamscan command, the error went away.  This
command worked okay in previous versions.
I get that same error and I don't run a script. Still haven't figured it 
out.


Does it occur with each run of freshclam?



Yes.

dp
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html

Re: [Clamav-users] freshclam - ERROR: Can't lock database directory:-stale .dbLock file

[Dennis Peterson]

Dennis Peterson wrote:

Tomasz Kojm wrote:

On Mon, 26 Feb 2007 23:41:39 -0800
Dennis Peterson [EMAIL PROTECTED] wrote:


Wolf, Brian wrote:

Brian wrote:


both freshclam and clamd 0.90 have been dying with
Can't lock database directory every time a new version of 
signatures comes out.  


It looks like my problem was caused by having freshclam run a script 
after an update using the OnUpdateExecute line in freshclam.conf.  
The script created a file containing the EICAR pattern and then 
scanned it with

   cat /tmp/eicar.com | /usr/local/bin/clamscan --quiet -

Once I removed the clamscan command, the error went away.  This
command worked okay in previous versions.
I get that same error and I don't run a script. Still haven't figured 
it out.


Does it occur with each run of freshclam?



Yes.


Let me expand some, because something's changed. Some days ago I 
redirected stdout and error out to dev/null because of the cron mail 
that was being send when running freshclam. I just ran it from the 
command line and it worked fine - no error. Nothing changed (something 
I'm sure of is wrong :) ) but now the error is gone. I've removed the 
error redirection from the cron process and will monitor again.


dp
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html

Re: [Clamav-users] freshclam - ERROR: Can't lock database directory

[Leonardo Rodrigues Magalhães]

   I have no script OnUpdateExecute script and got the lock problem 
today, right after a completly buggy freshclam run. Watch the logs:



Received signal: wake up
ClamAV update process started at Tue Feb 27 07:31:00 2007
main.cvd is up to date (version: 42, sigs: 83951, f-level: 10, builder: 
tkojm)

nonblock_recv: recv timing out (30 secs)
ERROR: getfile: Error while reading database from db.us.clamav.net (IP: 
208.67.80.27)

ERROR: getpatch: Can't download daily-2659.cdiff from db.us.clamav.net
Downloading daily-2659.cdiff [100%]
ERROR: getfile: daily-2660.cdiff not found on remote server (IP: 
209.8.40.140)

ERROR: getpatch: Can't download daily-2660.cdiff from db.us.clamav.net
ERROR: getfile: daily-2660.cdiff not found on remote server (IP: 
64.246.44.108)

ERROR: getpatch: Can't download daily-2660.cdiff from db.us.clamav.net
ERROR: getfile: daily-2660.cdiff not found on remote server (IP: 
64.246.44.108)

ERROR: getpatch: Can't download daily-2660.cdiff from db.us.clamav.net
WARNING: Incremental update failed, trying to download daily.cvd
Downloading daily.cvd [100%]
WARNING: Mirror 205.139.192.13 is not synchronized.
Trying again in 5 secs...
ClamAV update process started at Tue Feb 27 07:33:58 2007
main.cvd is up to date (version: 42, sigs: 83951, f-level: 10, builder: 
tkojm)

Downloading daily-2659.cdiff [100%]
ERROR: getfile: daily-2660.cdiff not found on remote server (IP: 
64.246.44.108)

ERROR: getpatch: Can't download daily-2660.cdiff from db.us.clamav.net
ERROR: getfile: daily-2660.cdiff not found on remote server (IP: 
64.246.44.108)

ERROR: getpatch: Can't download daily-2660.cdiff from db.us.clamav.net
ERROR: getfile: daily-2660.cdiff not found on remote server (IP: 
67.18.105.98)

ERROR: getpatch: Can't download daily-2660.cdiff from db.us.clamav.net
WARNING: Incremental update failed, trying to download daily.cvd
Downloading daily.cvd [100%]
WARNING: Mirror 152.13.144.243 is not synchronized.
Trying again in 5 secs...
ClamAV update process started at Tue Feb 27 07:34:03 2007
main.cvd is up to date (version: 42, sigs: 83951, f-level: 10, builder: 
tkojm)

Downloading daily-2659.cdiff [100%]
ERROR: getfile: daily-2660.cdiff not found on remote server (IP: 
209.8.40.140)

ERROR: getpatch: Can't download daily-2660.cdiff from db.us.clamav.net
ERROR: getfile: daily-2660.cdiff not found on remote server (IP: 
67.18.105.98)

ERROR: getpatch: Can't download daily-2660.cdiff from db.us.clamav.net
ERROR: getfile: daily-2660.cdiff not found on remote server (IP: 
67.18.105.98)

ERROR: getpatch: Can't download daily-2660.cdiff from db.us.clamav.net
WARNING: Incremental update failed, trying to download daily.cvd
Downloading daily.cvd [100%]
WARNING: Mirror 209.8.40.140 is not synchronized.
Giving up on db.us.clamav.net...
ClamAV update process started at Tue Feb 27 07:34:03 2007
main.cvd is up to date (version: 42, sigs: 83951, f-level: 10, builder: 
tkojm)

Downloading daily-2659.cdiff [100%]
Downloading daily-2660.cdiff [100%]
Downloading daily-2661.cdiff [100%]
daily.inc updated (version: 2661, sigs: 11349, f-level: 13, builder: 
ccordes)
Database updated (95300 signatures) from database.clamav.net (IP: 
130.59.10.34)

Clamd successfully notified about the update.
--


   And then, in clamd.log:

Tue Feb 27 07:32:54 2007 - Reading databases from /var/lib/clamav
Tue Feb 27 07:35:05 2007 - ERROR: reload db failed: Unable to lock 
database directory
Tue Feb 27 07:35:05 2007 - Terminating because of a fatal error.Tue Feb 
27 07:35:05 2007 - Socket file removed.

Tue Feb 27 07:35:05 2007 - Pid file removed.
Tue Feb 27 07:35:05 2007 - --- Stopped at Tue Feb 27 07:35:05 2007

   Unfortunelly, people rebooted server before called me, i couldnt 
watch for stale files on /var/lib/clamav. It was working again right 
after a reboot.



Tomasz Kojm escreveu:

On Mon, 26 Feb 2007 23:41:39 -0800
Dennis Peterson [EMAIL PROTECTED] wrote:

  

Wolf, Brian wrote:


Brian wrote:

It looks like my problem was caused by having freshclam run 
a script after an update using the OnUpdateExecute line in 
freshclam.conf.  The script created a file containing the EICAR 
pattern and then scanned it with 


   cat /tmp/eicar.com | /usr/local/bin/clamscan --quiet -

Once I removed the clamscan command, the error went away.  This
command worked okay in previous versions.
  
I get that same error and I don't run a script. Still haven't figured it 
out.



Does it occur with each run of freshclam?

  


--


Atenciosamente / Sincerily,
Leonardo Rodrigues
Solutti Tecnologia
http://www.solutti.com.br

Minha armadilha de SPAM, NÃO mandem email
[EMAIL PROTECTED]
My SPAMTRAP, do not email it




___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html

RE: [Clamav-users] freshclam - ERROR: Can't lock database directory:-stale .dbLock file

[Wolf, Brian]

Brian wrote:

 both freshclam and clamd 0.90 have been dying with
 Can't lock database directory every time a new 
 version of signatures comes out.  


It looks like my problem was caused by having freshclam run 
a script after an update using the OnUpdateExecute line in 
freshclam.conf.  The script created a file containing the EICAR 
pattern and then scanned it with 

   cat /tmp/eicar.com | /usr/local/bin/clamscan --quiet -

Once I removed the clamscan command, the error went away.  This
command worked okay in previous versions.
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html

Re: [Clamav-users] freshclam - ERROR: Can't lock database directory:-stale .dbLock file

[Dennis Peterson]

Wolf, Brian wrote:

Brian wrote:


both freshclam and clamd 0.90 have been dying with
Can't lock database directory every time a new 
version of signatures comes out.  



It looks like my problem was caused by having freshclam run 
a script after an update using the OnUpdateExecute line in 
freshclam.conf.  The script created a file containing the EICAR 
pattern and then scanned it with 


   cat /tmp/eicar.com | /usr/local/bin/clamscan --quiet -

Once I removed the clamscan command, the error went away.  This
command worked okay in previous versions.


I get that same error and I don't run a script. Still haven't figured it 
out.


dp
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html

[Clamav-users] freshclam - ERROR: Can't lock database directory: - stale .dbLock file

[Paul Griffith]

Greetings,

Has anyone encountered the following problem:

Somehow there was a stale .dbLock file in the database directory, and the  
log file was full of

'ERROR: Can't lock database directory: /cs/local/share/clamav'
I did a strace and saw the freashclam was trying to create a new .dbLock  
file, but it kept failing due to the existing .dbLock file. I am going to  
assume that a previous freshclam didn't exit cleanly and left a .dbLock  
around, is there a FixStaleDBLock file option similar to the  
FixStaleSocket option?


We normally run freshclam out of cron, ClamAv version 0.90 and we are  
using ScriptedUpdates.



Thanks
Paul
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html

Re: [Clamav-users] freshclam - ERROR: Can't lock database directory: - stale .dbLock file

[aCaB]

Paul Griffith wrote:
 Greetings,
 
 Has anyone encountered the following problem:
 
 Somehow there was a stale .dbLock file in the database directory, and
 the  log file was full of
 'ERROR: Can't lock database directory: /cs/local/share/clamav'
 I did a strace and saw the freashclam was trying to create a new
 .dbLock  file, but it kept failing due to the existing .dbLock file. I
 am going to  assume that a previous freshclam didn't exit cleanly and
 left a .dbLock  around, is there a FixStaleDBLock file option similar to
 the  FixStaleSocket option?
 
 We normally run freshclam out of cron, ClamAv version 0.90 and we are 
 using ScriptedUpdates.

Hi Paul,
This happened to me a couple of times when I killed (TERM) freshclam
while a download was in progress...
Unfortunately I'm unable to reproduce the problem.

Could you please provide some hints?

-aCaB
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html

RE: [Clamav-users] freshclam - ERROR: Can't lock database directory: -stale .dbLock file

[Wolf, Brian]

Paul Griffith wrote:

 Has anyone encountered the following problem:

 Somehow there was a stale .dbLock file in the database directory, and
the  
 log file was full of
 'ERROR: Can't lock database directory: /cs/local/share/clamav' I did a
strace and saw the freashclam was trying to create a new .dbLock  
 file, but it kept failing due to the existing .dbLock file. I am going
to  
 assume that a previous freshclam didn't exit cleanly and left a
.dbLock  
 around, is there a FixStaleDBLock file option similar to the  
 FixStaleSocket option?

 We normally run freshclam out of cron, ClamAv version 0.90 and we are

 using ScriptedUpdates.



I haven't seen a stale .dbLock file, but both freshclam and clamd 0.90
have been dying with Can't lock database directory every time a new
version of signatures comes out.  This is on a RedHat Advanced Server 4
system.  I have pasted portions of the logs below.  Freshclam runs as a
cron job under root.  Freshclam.conf sets DatabaseOwner clamav, and
clamd.conf set User clamav.  I have tried using the default database
directory of /usr/local/share/clamav, which is what the logs below show.
I also tried building using --with-dbdir=a different directory and
setting DatabaseDirectory accordingly in both .conf files, and got the
same result.  

This morning's run was after doing a make uninstall, make clean,
deleting the /usr/local/share/clamav directory tree, and rebuilding with
the defaults.  The results are the same- every time freshclam pulls down
a new version, it notifies clamd, then gets the directory-locked error.
Then clamd dies with the same error.

- Brian


Output of freshclam cron job:

ClamAV update process started at Thu Feb 22 11:22:01 2007
main.cvd is up to date (version: 42, sigs: 83951, f-level: 10, builder:
tkojm)
Downloading daily-2629.cdiff [100%]
Downloading daily-2629.cdiff [100%]
daily.inc updated (version: 2629, sigs: 9682, f-level: 13, builder:
trog)
Database updated (93633 signatures) from database.clamav.net (IP:
194.47.250.218)
Clamd successfully notified about the update.
LibClamAV Error: cl_load(): Unable to lock database directory:
/usr/local/share/clamav
ERROR: Unable to lock database directory


Freshclam.log

Current working dir is /usr/local/share/clamav
Max retries == 3
ClamAV update process started at Thu Feb 22 11:22:01 2007
Querying current.cvd.clamav.net
TTL: 900
Software version from DNS: 0.90
main.cvd version from DNS: 42
main.cvd is up to date (version: 42, sigs: 83951, f-level: 10, builder:
tkojm)
daily.cvd version from DNS: 2629
Retrieving http://database.clamav.net/daily-2629.cdiff
Trying to download http://database.clamav.net/daily-2629.cdiff (IP:
194.47.250.218)
Downloading daily-2629.cdiff [100%]
cdiff_apply: Parsed 21 lines and executed 21 commands
Removing backup directory ./clamav-2a20716f43129d951049dd17771ad60e
daily.inc updated (version: 2629, sigs: 9682, f-level: 13, builder:
trog)
Database updated (93633 signatures) from database.clamav.net (IP:
194.47.250.218)
Clamd successfully notified about the update.





clamd.log:

Thu Feb 22 08:42:47 2007 - +++ Started at Thu Feb 22 08:42:47 2007
Thu Feb 22 08:42:47 2007 - clamd daemon 0.90 (OS: linux-gnu, ARCH:
i386, CPU: i686)
Thu Feb 22 08:42:47 2007 - Log file size limited to 1048576 bytes.
Thu Feb 22 08:42:47 2007 - Reading databases from
/usr/local/share/clamav
Thu Feb 22 08:42:49 2007 - Loaded 93621 signatures.
Thu Feb 22 08:42:49 2007 - Unix socket file /tmp/clamd
Thu Feb 22 08:42:49 2007 - Setting connection queue length to 15
Thu Feb 22 08:42:49 2007 - Archive: Archived file size limit set to
10485760 bytes.
Thu Feb 22 08:42:49 2007 - Archive: Recursion level limit set to 8.
Thu Feb 22 08:42:49 2007 - Archive: Files limit set to 1000.
Thu Feb 22 08:42:49 2007 - Archive: Compression ratio limit set to 250.
Thu Feb 22 08:42:49 2007 - Archive support enabled.
Thu Feb 22 08:42:49 2007 - Algorithmic detection enabled.
Thu Feb 22 08:42:49 2007 - Portable Executable support enabled.
Thu Feb 22 08:42:49 2007 - ELF support enabled.
Thu Feb 22 08:42:49 2007 - Mail files support enabled.
Thu Feb 22 08:42:49 2007 - Mail: Recursion level limit set to 64.
Thu Feb 22 08:42:49 2007 - OLE2 support enabled.
Thu Feb 22 08:42:49 2007 - HTML support enabled.
Thu Feb 22 08:42:49 2007 - Self checking every 1800 seconds.
Thu Feb 22 11:22:02 2007 - No stats for Database check - forcing reload
Thu Feb 22 11:22:02 2007 - Reading databases from
/usr/local/share/clamav
Thu Feb 22 11:24:12 2007 - ERROR: reload db failed: Unable to lock
database directory
Thu Feb 22 11:24:12 2007 - Terminating because of a fatal error.Thu Feb
22 11:24:12 2007 - Socket file removed.
Thu Feb 22 11:24:12 2007 - Pid file removed.
Thu Feb 22 11:24:12 2007 - --- Stopped at Thu Feb 22 11:24:12 2007
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html

Re: [Clamav-users] freshclam - ERROR: Can't lock database directory: - stale .dbLock file

[Paul Griffith]

On Thu, 22 Feb 2007 11:52:08 -0500, aCaB [EMAIL PROTECTED] wrote:


Paul Griffith wrote:

Greetings,

Has anyone encountered the following problem:

Somehow there was a stale .dbLock file in the database directory, and
the  log file was full of
'ERROR: Can't lock database directory: /cs/local/share/clamav'
I did a strace and saw the freashclam was trying to create a new
.dbLock  file, but it kept failing due to the existing .dbLock file. I
am going to  assume that a previous freshclam didn't exit cleanly and
left a .dbLock  around, is there a FixStaleDBLock file option similar to
the  FixStaleSocket option?

We normally run freshclam out of cron, ClamAv version 0.90 and we are
using ScriptedUpdates.


Hi Paul,
This happened to me a couple of times when I killed (TERM) freshclam
while a download was in progress...
Unfortunately I'm unable to reproduce the problem.

Could you please provide some hints?

-aCaB


I will see what happens today, I didn't do anything special in my setup.
 The only unique thing in my setup is that my database sits on a NFS share.

Here is what the stale .dbLock file looks like:

#ls -lait
total 8962
545006030 -rwxrwxr-- 1 clamav clamav 0 Feb 22 02:28 .dbLock*

The million dollar question is what happened between Feb 21 17:28 and Feb  
22 02:28.


Here are some log snippets...

--from /var/log/freshclam.0

ClamAV update process started at Wed Feb 21 15:28:06 2007
main.cvd is up to date (version: 42, sigs: 83951, f-level: 10, builder:  
tkojm)
daily.inc is up to date (version: 2622, sigs: 9581, f-level: 13, builder:  
ccordes)

--
ClamAV update process started at Wed Feb 21 16:28:02 2007
main.cvd is up to date (version: 42, sigs: 83951, f-level: 10, builder:  
tkojm)
daily.inc is up to date (version: 2622, sigs: 9581, f-level: 13, builder:  
ccordes)

--
ClamAV update process started at Wed Feb 21 17:28:01 2007
main.cvd is up to date (version: 42, sigs: 83951, f-level: 10, builder:  
tkojm)

Downloading daily-2623.cdiff [0%]
daily.inc updated (version: 2623, sigs: 9598, f-level: 13, builder:  
ccordes)

Database updated (93549 signatures) from db.ca.clamav.net (IP: 24.215.0.24)
--
ERROR: Can't lock database directory: /cs/local/share/clamav
--
ERROR: Can't lock database directory: /cs/local/share/clamav
--

Thanks
Paul
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html

RE: [Clamav-users] freshclam - ERROR: Can't lock database directory:-stale .dbLock file

[Wolf, Brian]

 I haven't seen a stale .dbLock file, but both freshclam and clamd 0.90
have been dying with Can't lock database  directory every
time a new version of signatures comes out.  This is on a RedHat
Advanced Server 4 system.  I have   pasted portions of the logs
below.  Freshclam runs as a cron job under root.  Freshclam.conf sets
DatabaseOwner clamav,   and clamd.conf set User clamav.  

BTW, here are the permissions on the database directory and files:

$ ls -lad /usr/local/share/clamav
drwxrwxr-x  3 clamav clamav 4096 Feb 22 12:22 /usr/local/share/clamav

$ ls -la /usr/local/share/clamav
total 8048
drwxrwxr-x  3 clamav clamav4096 Feb 22 12:22 .
drwxr-xr-x  5 root   root  4096 Feb 21 14:36 ..
drwxr-xr-x  2 clamav clamav4096 Feb 22 11:22 daily.inc
-rw-rw-r--  1 clamav clamav 8189490 Feb 21 14:36 main.cvd
-rw---  1 clamav clamav 260 Feb 22 12:22 mirrors.dat

$ ls -la /usr/local/share/clamav/daily.inc
total 1780
drwxr-xr-x  2 clamav clamav4096 Feb 22 11:22 .
drwxrwxr-x  3 clamav clamav4096 Feb 22 12:22 ..
-rw-r--r--  1 clamav clamav   17992 Feb 21 14:37 COPYING
-rw-r--r--  1 clamav clamav  19 Feb 21 14:37 daily.cfg
-rw-r--r--  1 clamav clamav   23073 Feb 22 04:22 daily.db
-rw-r--r--  1 clamav clamav2109 Feb 21 18:22 daily.fp
-rw-r--r--  1 clamav clamav   10097 Feb 22 11:22 daily.hdb
-rw-r--r--  1 clamav clamav 410 Feb 22 11:22 daily.info
-rw-r--r--  1 clamav clamav  191419 Feb 22 06:22 daily.mdb
-rw-r--r--  1 clamav clamav 1478099 Feb 22 11:22 daily.ndb
-rw-r--r--  1 clamav clamav1694 Feb 21 18:22 daily.pdb
-rw-r--r--  1 clamav clamav 205 Feb 21 14:37 daily.wdb
-rw-r--r--  1 clamav clamav1848 Feb 21 14:37 daily.zmd


$ egrep clamav /etc/passwd
clamav:x:502:502:Clam Antivirus:/home/clamav:/bin/false
$ egrep clamav /etc/group
clamav:x:502:bwolf


- Brian

___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html

[Clamav-users] freshclam error

[raja semut]

Dear All,

I have a problem with update virus DB using freshclam. it show error 
like this :


# freshclam -l /var/log/clamav/freshclam.log
/ClamAV update process started at Fri Dec  8 14:04:42 2006
main.cvd is up to date (version: 41, sigs: 73809, f-level: 10, builder: 
tkojm)

ERROR: Error while reading database from db.id.clamav.net
ERROR: Can't download daily.cvd from db.id.clamav.net (IP: 202.158.56.242)
Trying again in 5 secs.../

any one knows what's wrong with my clamav, please advice

thank you.

ANT.
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html

Re: [Clamav-users] freshclam error

[Luca Gibelli]

Hello Steve,

 Anyone else seeing this sort of thing?
 ERROR: getfile: daily-1635.cdiff not found on remote server
 ERROR: getpatch: Can't download daily-1635.cdiff from db.uk.clamav.net
 (IP: 193.1.193.64)

perhaps it has been a temp. delay in cdiff propagation. The cdiff files
are available on all mirrors part of the db.uk.clamav.net RR, I just checked 
them.

There are still some problems with a few US mirrors which are not using
the standard setup described in www.clamav.net/doc/mirrors , I've
already contacted the sysadmins, but being the middle of Summer in
this part of the world, it will take some time to get an answer :)

Best regards

-- 
Luca Gibelli (luca _at_ clamav.net) - ClamAV, a GPL anti-virus toolkit 
[Tel] +44 2081239239 [Fax] +39 0187015046 [IM] nervous/jabber.linux.it
PGP key id 5EFC5582 @ key server || http://www.clamav.net/gpg/luca.gpg


signature.asc
Description: Digital signature
___
http://lurker.clamav.net/list/clamav-users.html

[Clamav-users] freshclam error

[Steve Basford]

Hi All,

Anyone else seeing this sort of thing?

C:\CLAMAV~1\binfreshclam
ClamAV update process started at Fri Aug  4 18:52:23 2006
main.cvd is up to date (version: 39, sigs: 58116, f-level: 8, builder:
tkojm)
ERROR: getfile: daily-1635.cdiff not found on remote server
ERROR: getpatch: Can't download daily-1635.cdiff from db.uk.clamav.net
(IP: 193.
1.193.64)
WARNING: Removing incremental directory daily.inc
WARNING: Incremental update failed, downloading complete database
Downloading daily.cvd [100]]
daily.cvd updated (version: 1635, sigs: 6065, f-level: 8, builder: sven)
Database updated (64181 signatures) from db.uk.clamav.net (IP: 193.1.193.64)

Anyone know why?

Cheers,

Steve
___
http://lurker.clamav.net/list/clamav-users.html

RE: [Clamav-users] Freshclam error

[Robert Isaac]

 -Original Message-
 From: [EMAIL PROTECTED] 
 [mailto:[EMAIL PROTECTED] On Behalf Of 
 Richard Feldmann
 Sent: 11 July 2006 05:03
 To: clamav-users@lists.clamav.net
 Subject: Re: [Clamav-users] Freshclam error
 
 Robert Isaac spake thusly on Mon, Jul 10, 2006 at 09:52:38PM +0100:
  Maillog shows -
  
  Jul 10 21:42:05 nc3-0016 update.virus.scanners: Found 
 clamav installed 
  Jul 10 21:42:05 nc3-0016 update.virus.scanners: Running 
 autoupdate for 
  clamav Jul 10 21:42:20 nc3-0016 ClamAV-autoupdate[13387]: ClamAV 
  updater /usr/local/bin/freshclam cannot be run Jul 10 21:42:06 
  nc3-0016 update.virus.scanners: Found generic installed Jul 10 
  21:42:06 nc3-0016 update.virus.scanners: Running autoupdate for 
  generic
  
  0.88.3 running on a ProLiant G3 DL360 with RHESL-4
  
  Something is not right here.
  
  Bob
  
 
 --- end quoted text ---
 
 Are you certain that the freshclam binary exists and is 
 executable? Are the permissions correct?
 
 Regards,
 Richard
 
 --
 Did this email or post help you? If so, please rate me at 
 affero: http://rate.affero.net/RhunDraco
 
freshclam is in /usr/bin

[EMAIL PROTECTED] ~]# /usr/bin/freshclam
ClamAV update process started at Tue Jul 11 16:58:37 2006
main.cvd is up to date (version: 39, sigs: 58116, f-level: 8, builder:
tkojm)
daily.cvd is up to date (version: 1591, sigs: 3108, f-level: 8, builder:
sven)

Bob



___
http://lurker.clamav.net/list/clamav-users.html

Re: [Clamav-users] Freshclam error

[Rob MacGregor]

On 7/11/06, Robert Isaac [EMAIL PROTECTED] wrote:

freshclam is in /usr/bin


However whatever you're using (update.virus.scanners) is looking in
/usr/local/bin.  The problem is with that software, not with clamav
(and, IMO, you should be using the daemon mode of freshclam anyway).

--
Please keep list traffic on the list.

Rob MacGregor
 Whoever fights monsters should see to it that in the process he
   doesn't become a monster.  Friedrich Nietzsche
___
http://lurker.clamav.net/list/clamav-users.html

RE: [Clamav-users] Freshclam error

[Robert Isaac]

 -Original Message-
 From: [EMAIL PROTECTED] 
 [mailto:[EMAIL PROTECTED] On Behalf Of 
 Rob MacGregor
 Sent: 11 July 2006 17:21
 To: ClamAV users ML
 Subject: Re: [Clamav-users] Freshclam error
 
 On 7/11/06, Robert Isaac [EMAIL PROTECTED] wrote:
  freshclam is in /usr/bin
 
 However whatever you're using (update.virus.scanners) is 
 looking in /usr/local/bin.  The problem is with that 
 software, not with clamav (and, IMO, you should be using the 
 daemon mode of freshclam anyway).
 
 -- 
  Please keep list traffic on the list.
 
 Rob MacGregor
   Whoever fights monsters should see to it that in the process he
 doesn't become a monster.  Friedrich Nietzsche
 ___
 http://lurker.clamav.net/list/clamav-users.html
 

I have set the daemon to run updates now from /usr/local/bin/freshclam
script.

Bob


___
http://lurker.clamav.net/list/clamav-users.html

[Clamav-users] Freshclam error

[Robert Isaac]

Maillog shows - 

Jul 10 21:42:05 nc3-0016 update.virus.scanners: Found clamav installed
Jul 10 21:42:05 nc3-0016 update.virus.scanners: Running autoupdate for
clamav
Jul 10 21:42:20 nc3-0016 ClamAV-autoupdate[13387]: ClamAV updater
/usr/local/bin/freshclam cannot be run 
Jul 10 21:42:06 nc3-0016 update.virus.scanners: Found generic installed
Jul 10 21:42:06 nc3-0016 update.virus.scanners: Running autoupdate for
generic

0.88.3 running on a ProLiant G3 DL360 with RHESL-4

Something is not right here.

Bob

___
Robert Isaac
Director/Web Admin

www.volvoclub.org.uk

Please include all previous text with reply
All messages are scanned with an antivirus scanner.
 


___
http://lurker.clamav.net/list/clamav-users.html

Re: [Clamav-users] Freshclam error

[Richard Feldmann]

Robert Isaac spake thusly on Mon, Jul 10, 2006 at 09:52:38PM +0100:
 Maillog shows - 
 
 Jul 10 21:42:05 nc3-0016 update.virus.scanners: Found clamav installed
 Jul 10 21:42:05 nc3-0016 update.virus.scanners: Running autoupdate for
 clamav
 Jul 10 21:42:20 nc3-0016 ClamAV-autoupdate[13387]: ClamAV updater
 /usr/local/bin/freshclam cannot be run 
 Jul 10 21:42:06 nc3-0016 update.virus.scanners: Found generic installed
 Jul 10 21:42:06 nc3-0016 update.virus.scanners: Running autoupdate for
 generic
 
 0.88.3 running on a ProLiant G3 DL360 with RHESL-4
 
 Something is not right here.
 
 Bob
 

--- end quoted text ---

Are you certain that the freshclam binary exists and is executable? Are the 
permissions correct?

Regards,
Richard

-- 
Did this email or post help you? If so, please rate
me at affero: http://rate.affero.net/RhunDraco


pgpj6hq44oY28.pgp
Description: PGP signature
___
http://lurker.clamav.net/list/clamav-users.html

Re: [Clamav-users] freshclam error

[Paul Dobson]

A symlink enables freshclam to start but I get an error message in the log
saying that functionality is level 1 and level 3 is required.

Paul Dobson

___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users

Re: [Clamav-users] freshclam error

[Paul Dobson]

No sorry it doesn't.  I know how to install clamav - I've been running it
since 0.67.

Paul

___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users

Re: [Clamav-users] freshclam error

[Brian Morrison]

On Tue, 16 Nov 2004 08:57:33 + in
[EMAIL PROTECTED] Paul Dobson
[EMAIL PROTECTED] wrote:

 A symlink enables freshclam to start but I get an error message in the
 log saying that functionality is level 1 and level 3 is required.

Looks like you have an old version of libclamav in your LD_PATH or else
you are running an old version of freshclam.

I'd suggest very carefully checking your installation and finding and
clearing out the old stuff.

-- 

Brian Morrison

bdm at fenrir dot org dot uk

GnuPG key ID DE32E5C5 - http://wwwkeys.uk.pgp.net/pgpnet/wwwkeys.html
___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users

Re: [Clamav-users] freshclam error

[Paul Dobson]

ClamAV users ML [EMAIL PROTECTED] writes:
Looks like you have an old version of libclamav in your LD_PATH or else
you are running an old version of freshclam.

I'd suggest very carefully checking your installation and finding and
clearing out the old stuff.

I would guess that the version I have (libclamav.1.0.3.dylib) is a newer
version than libclamav.1.dylib and I cleared out the old installation
(0.70) using make uninstall and make distclean won't this have got
everything? 

Paul

___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users

Re: [Clamav-users] freshclam error

[Brian Morrison]

On Tue, 16 Nov 2004 10:01:07 + in
[EMAIL PROTECTED] Paul Dobson
[EMAIL PROTECTED] wrote:

 ClamAV users ML [EMAIL PROTECTED] writes:
 Looks like you have an old version of libclamav in your LD_PATH or
 else you are running an old version of freshclam.
 
 I'd suggest very carefully checking your installation and finding and
 clearing out the old stuff.
 
 I would guess that the version I have (libclamav.1.0.3.dylib) is a
 newer version than libclamav.1.dylib and I cleared out the old
 installation(0.70) using make uninstall and make distclean won't this
 have got everything? 

It probably should, but it sounds to me as if you need a symlink anyway.
On Linux it is usual to have a shared library name such as foo.so linked
to a major version like foo.so.1 which itself is a link to the actual
library itself which is something like foo.so.1.0.3 (I hope that's
clear). I'm not MacOS X-aware so maybe someone else can help you out
with the equivalent naming convention there?

The symptom you describe sounds like there is an old library somewhere
else, but I forget when functionality level 2 was brought in, it might
have been between 0.70 and 0.75, so whatever you had was older than this
breakpoint. I'd say there is still a remnant of 0.70 on there somewhere
though.

-- 

Brian Morrison

bdm at fenrir dot org dot uk

GnuPG key ID DE32E5C5 - http://wwwkeys.uk.pgp.net/pgpnet/wwwkeys.html
___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users

Re: [Clamav-users] freshclam error

[Paul Dobson]

ClamAV users ML [EMAIL PROTECTED] writes:
The symptom you describe sounds like there is an old library somewhere
else, but I forget when functionality level 2 was brought in, it might
have been between 0.70 and 0.75, so whatever you had was older than this
breakpoint. I'd say there is still a remnant of 0.70 on there somewhere
though.

I was on functionality level 2 on 0.70 - I remember this because I
upgraded from 0.67 to 0.70 because of an error message telling me that
functionality should be level 2.

I guess the thing to do is to uninstall 0.80 and look around for files
that are left.

Paul

___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users

Re: [Clamav-users] freshclam error

[Brian Morrison]

On Tue, 16 Nov 2004 10:29:29 + in
[EMAIL PROTECTED] Paul Dobson
[EMAIL PROTECTED] wrote:

  I guess the thing to do is to uninstall 0.80 and look around for
  files that are left.

Yes, that would work, you might just try a comprehensive search before
you do something quite that drastic.

-- 

Brian Morrison

bdm at fenrir dot org dot uk

GnuPG key ID DE32E5C5 - http://wwwkeys.uk.pgp.net/pgpnet/wwwkeys.html
___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users

Re: [Clamav-users] freshclam error

[Paul Dobson]

A search solved the problem.  I had forgotten that as part of the original
install the instructions had been to copy clamscan and freshclam to
/usr/bin!  Now removed and working ok.

Paul

___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users

Re: [Clamav-users] freshclam error

[Brian Morrison]

On Tue, 16 Nov 2004 14:32:19 + in
[EMAIL PROTECTED] Paul Dobson
[EMAIL PROTECTED] wrote:

 A search solved the problem.  I had forgotten that as part of the
 original install the instructions had been to copy clamscan and
 freshclam to/usr/bin!  Now removed and working ok.

Good! Pleased it's sorted out now

-- 

Brian Morrison

bdm at fenrir dot org dot uk

GnuPG key ID DE32E5C5 - http://wwwkeys.uk.pgp.net/pgpnet/wwwkeys.html
___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users

[Clamav-users] freshclam error

[Paul Dobson]

I have just uninstalled clamav 0.70 and installed clamav 0.80 on MacOSX. 
Clamav itself seems to be working ok but freshclam fails to start with an
error message saying that it cannot open /usr/local/lib/libclamav.1.dylib.
 When I look in the directory that file is not there but there is
libclamav.1.0.3.dylib.

Anybody any ideas on how to fix this?

Thanks

Paul Dobson

___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users

Re: [Clamav-users] freshclam error

[Brian Morrison]

On Mon, 15 Nov 2004 16:51:07 + in
[EMAIL PROTECTED] Paul Dobson
[EMAIL PROTECTED] wrote:

   When I look in the directory that file is not there but there is
  libclamav.1.0.3.dylib.
 
  Anybody any ideas on how to fix this?

A symlink from the libclamav.1.0.3.dylib to libclamv.1.dylib sounds like
a good way to start...

-- 

Brian Morrison

bdm at fenrir dot org dot uk

GnuPG key ID DE32E5C5 - http://wwwkeys.uk.pgp.net/pgpnet/wwwkeys.html
___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users

[Clamav-users] Freshclam error after upgrade

[Jason Dixon]

I just upgraded my clamav installation from 0.75 to 0.80 on my RHEL 3.0 
server.  After merging my configuration changes, clamd is running fine. 
 However, I'm running into problems with freshclam:

[EMAIL PROTECTED] root]# freshclam --datadir=/var/amavis/clamav 
--log=/var/amavis/clamav/logs/freshclam.log --log-verbose 
--daemon-notify=/etc/clamd.conf
ERROR: Please edit the example config file /etc/freshclam.conf.
ERROR: Can't open /var/amavis/clamav/logs/freshclam.log in append mode 
(check permissions!).
ERROR: Problem with internal logger.

I'm not sure why I'm getting this error, the logfile in question has 
been used since for 0.75, and the permissions look fine:

[EMAIL PROTECTED] root]# ls -l /var/amavis/clamav/logs/freshclam.log
-rw-r--r--1 mailscan mailscan 6680 Nov 13 23:57 
/var/amavis/clamav/logs/freshclam.log

Here are the changed settings in my /etc/freshclam.conf file:
DatabaseDirectory /var/amavis/clamav
UpdateLogFile /var/amavis/clamav/logs/freshclam.log
DatabaseOwner mailscan
MaxAttempts 5
Checks 24
NotifyClamd
Does anyone have any ideas what I've overlooked?  Thanks in advance,
--
Jason Dixon
DixonGroup Consulting
http://www.dixongroup.net
___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users

Re: [Clamav-users] Freshclam error after upgrade

[Matt]

Jason Dixon wrote:

 ERROR: Please edit the example config file /etc/freshclam.conf.

 Comment out the example line?

 ERROR: Can't open /var/amavis/clamav/logs/freshclam.log in append mode 
 (check permissions!).

 Whom are the user and group in clamd.conf?

Matt
___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users

Re: [Clamav-users] Freshclam error after upgrade

[Jason Dixon]

On Nov 14, 2004, at 7:35 AM, Matt wrote:
Jason Dixon wrote:
ERROR: Please edit the example config file /etc/freshclam.conf.
 Comment out the example line?
LOL!
Thanks Matt, that fixed it.  /me smacks his head in disbelief.
--
Jason Dixon
DixonGroup Consulting
http://www.dixongroup.net
___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users

Re: [Clamav-users] Freshclam Error

[Daniel J McDonald]

On Thu, 2004-10-07 at 09:37 -0500, Richard Humphrey wrote:
 Ever since upgrading to 8.0 rc1 I have been getting the following
 error when running freshclam.
 
 # freshclam
 ClamAV update process started at Thu Oct  7 09:39:32 2004
 ERROR: Can't query current.cvd.clamav.net
 Reading CVD header (main.cvd): OK
 main.cvd is up to date (version: 27, sigs: 23982, f-level: 2, builder: tomek)
 ERROR: Can't query current.cvd.clamav.net
 Reading CVD header (daily.cvd): OK
 daily.cvd is up to date (version: 519, sigs: 859, f-level: 2, builder: trog)
 
 
 Any ideas what is going on?

You don't have access to do DNS queries?
[EMAIL PROTECTED] mcdonalddj]$ dig +short
current.cvd.clamav.net txt
0.80rc3:27:519:1097155814

That tells you:
1.  What the latest released version of clamav code is (0.80rc3)
2.  What the latest release of the main.cvd virus database is (27)
3.  What the latest release of the daily.cvd virus database is (51)
4.  Unix epoch time of the most recent change:
[EMAIL PROTECTED] mcdonalddj]$ perl -e 'print
time()-1097155814'
4990
or, about 8 hours ago

___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users

[Clamav-users] Freshclam error: libclamav.1.dylib (No such file or directory, errno = 2)

[Rob Kudyba]

On OS X 10.2.2, trying to run Freshclam after a successful install of 
ClamAV...test runs fine too. But running the freshclam updater results in:
/usr/local/bin/freshclam
dyld: /usr/local/bin/freshclam can't open library: 
/usr/local/lib/libclamav.1.dylib  (No such file or directory, errno = 2)
Trace/BPT trap

And the libclamav.1.dylib file is not in /usr/local/lib

Any suggestions?

Thanks.

---
This SF.Net email is sponsored by Sleepycat Software
Learn developer strategies Cisco, Motorola, Ericsson  Lucent use to 
deliver higher performing products faster, at low TCO.
http://www.sleepycat.com/telcomwpreg.php?From=osdnemail3
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users

Re: [Clamav-users] Freshclam error: libclamav.1.dylib

[OpenMacNews]

-- On Friday, May 7, 2004 4:07 PM -0400  Rob Kudyba [EMAIL PROTECTED] wrote:

On OS X 10.2.2, trying to run Freshclam after a successful install of ClamAV...test 
runs fine too. But running the freshclam updater results in:
/usr/local/bin/freshclam
dyld: /usr/local/bin/freshclam can't open library: /usr/local/lib/libclamav.1.dylib  
(No such file or directory, errno = 2)
Trace/BPT trap
And the libclamav.1.dylib file is not in /usr/local/lib

Any suggestions?

Thanks.
you *may* be having a dylib 'issue'.

have you installed dlcompat?  check to see that the following libs exist and are in your build path ...

   /usr/lib/libdl.0.dylib
   /usr/lib/libdl.1.dylib
   /usr/lib/libdl.a
   /usr/lib/libdl.dylib
if not there, try this:

   cd /usr/ports/

   cvs -d :pserver:[EMAIL PROTECTED]:/Volumes/src/cvs/od login
password: (RETURN)
   cvs -d :pserver:[EMAIL PROTECTED]:/Volumes/src/cvs/od co -d dlcompat 
proj/dlcompat
   unsetenv CFLAGS CPPFLAGS CXX CXXFLAGS LDFLAGS LDDLFLAGS LD_PREBIND LC_ALL LANG LINGUAS

   cd /usr/ports/dlcompat

   autoconf

   ./configure --prefix=/usr
   make
   make install
   rehash
then try your clamav build again ...

richard



---
This SF.Net email is sponsored by Sleepycat Software
Learn developer strategies Cisco, Motorola, Ericsson  Lucent use to 
deliver higher performing products faster, at low TCO.
http://www.sleepycat.com/telcomwpreg.php?From=osdnemail3
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users

[Clamav-users] freshclam error

[Jason Lieurance]

Hello,

We're running clamav 0.65 on FreesBSD 4.7 and its been running well for over a year.
When I set it up, I didn't run it as supervised. I wanted to run that way now so I
followed the instructions in the docs on how to do it. It works but now when my cron
job(sans the quotes):

'/usr/local/bin/freshclam --user clamav --quiet --daemon-notify -l
/var/log/clam-update.log'

runs I get this error:

connect(): No such file or directory
ERROR: Can't connect to clamd

And clamd(the socket) is no longer in the /tmp

Any help would be greatly appreciated.

-- 
Jason





---
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id=1470alloc_id=3638op=click
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users

[Clamav-users] Freshclam error in log file

[Jeff Ramsey]

Hi all,
New to group, tried to search previous postings for this, read everything in the docs group. I've got freshclam updating every two hours, and it seems to work fine, with one small exception. After it successfully downloads an update, I get a line in the config file that says this:

'Error Can't parse configuration file.'

This is right after the line 'Database updated (20381 signatures) from database.clamav.net (###.###.###.###).' I have checked and rechecked the permissions on both clamav.conf and freshclam.conf in the /etc dir and they are set g+wr u+wrx and the owner is clamav.clamav. What does this error mean? Do I have a syntax in my config file? And if so, which one? Here are both my config files, starting with clamav.conf:

-- Start of clamav.conf---

##
## Example config file for the Clam AV daemon
## Please read the clamav.conf(5) manual before editing this file.
##


# Comment or remove the line below.

# Uncomment this option to enable logging.
# LogFile must be writable for the user running the daemon.
# Full path is required.
#LogFile /tmp/clamd.log

# By default the log file is locked for writing - the lock protects against
# running clamd multiple times (if want to run another clamd, please
# copy the configuration file, change the LogFile variable, and run
# the daemon with --config-file option). That's why you shouldn't uncomment
# this option.
#LogFileUnlock

# Maximal size of the log file. Default is 1 Mb.
# Value of 0 disables the limit.
# You may use 'M' or 'm' for megabytes (1M = 1m = 1048576 bytes)
# and 'K' or 'k' for kilobytes (1K = 1k = 1024 bytes). To specify the size
# in bytes just don't use modifiers.
#LogFileMaxSize 2M

# Log time with an each message.
#LogTime

# Log also clean files. May be useful in debugging but will drastically
# increase the log size.
#LogClean

# Use system logger (can work together with LogFile).
#LogSyslog

# Enable verbose logging.
#LogVerbose

# This option allows you to save the process identifier of the listening
# daemon (main thread).
PidFile /var/run/clamd.pid

# Optional path to the global temporary directory.
# Default is system specific - usually /var/tmp or /tmp.
TemporaryDirectory /var/lib/clamav/tmp

# Path to the database directory.
# Default is the hardcoded directory (mostly /usr/local/share/clamav,
# but it depends on installation options).
DatabaseDirectory /var/lib/clamav

# The daemon works in local or network mode. Currently the local mode is
# recommended for security reasons.

# Path to the local socket. The daemon doesn't change the mode of the
# created file (portability reasons). You may want to create it in a directory
# which is only accessible for a user running daemon.
LocalSocket /tmp/clamd

# Remove stale socket after unclean shutdown.
FixStaleSocket

# TCP port address.
#TCPSocket 3310

# TCP address.
# By default we bind to INADDR_ANY, probably not wise.
# Enable the following to provide some degree of protection
# from the outside world.
#TCPAddr 127.0.0.1

# Maximum length the queue of pending connections may grow to.
# Default is 15.
#MaxConnectionQueueLength 30

# When activated, input stream (see STREAM command) will be saved to disk before
# scanning - this allows scanning within archives.
#StreamSaveToDisk

# Close the connection if this limit is exceeded.
#StreamMaxLength 10M

# Maximal number of a threads running at the same time.
# Default is 5, and it should be sufficient for a typical workstation.
# You may need to increase threads number for a server machine.
#MaxThreads 10

# Thread (scanner - single task) will be stopped after this time (seconds).
# Default is 180. Value of 0 disables the timeout. SECURITY HINT: Increase the
# timeout instead of disabling it.
#ThreadTimeout 500

# Maximal depth the directories are scanned at.
MaxDirectoryRecursion 15

# Follow a directory symlinks.
# SECURITY HINT: You should have enabled directory recursion limit to
# avoid potential problems.
FollowDirectorySymlinks

# Follow regular file symlinks.
FollowFileSymlinks

# Do internal checks (eg. check the integrity of the database structures)
# By default clamd checks itself every 3600 seconds (1 hour).
SelfCheck 600

# Execute a command when virus is found. In the command string %v and %f will
# be replaced by the virus name and the infected file name respectively.
#
# SECURITY WARNING: Make sure the virus event command cannot be exploited,
#		eg. by using some special file name when %f is used.
#		Always use a full path to the command.
#		Never delete/move files with this directive !
#VirusEvent /usr/local/bin/send_sms 123456789 VIRUS ALERT: %f: %v

# Run as selected user (clamd must be started by root).
# By default it doesn't drop privileges.
User clamav

# Initialize the supplementary group access (for all groups in /etc/group
# user is added in. clamd must be started by root).
#AllowSupplementaryGroups

# Don't 

Re: [Clamav-users] Freshclam error in log file

[Tomasz Kojm]

On Thu, 4 Mar 2004 06:52:27 -0800
Jeff Ramsey [EMAIL PROTECTED] wrote:

 # Send the RELOAD command to clamd.
 NotifyClamd [/etc/clamav.conf]

Fix that.

-- 
   oo. Tomasz Kojm [EMAIL PROTECTED]
  (\/)\. http://www.ClamAV.net/gpg/tkojm.gpg
 \..._ 0DCA5A08407D5288279DB43454822DC8985A444B
   //\   /\  Thu Mar  4 16:10:01 CET 2004


pgp0.pgp
Description: PGP signature

Re: [Clamav-users] Freshclam error in log file

[John Vestrum]

Take out the square brackets on NotifyClamd [/etc/clamav.conf]. The square 
brackets signify that the filename is an optional argument, so if your 
clamav.conf is in the default location, you could just leave the arguement 
out entirely:

# Send the RELOAD command to clamd.
NotifyClamd

JohnV

On Thursday 04 March 2004 08:52 am, you wrote:
 Hi all,
   New to group, tried to search previous postings for this, read
 everything in the docs group. I've got freshclam updating every two
 hours, and it seems to work fine, with one small exception. After it
 successfully downloads an update, I get a line in the config file that
 says this:

 'Error Can't parse configuration file.'

 This is right after the line 'Database updated (20381 signatures) from
 database.clamav.net (###.###.###.###).' I have checked and rechecked
 the permissions on both clamav.conf and freshclam.conf in the /etc dir
 and they are set g+wr u+wrx and the owner is clamav.clamav. What does
 this error mean? Do I have a syntax in my config file? And if so, which
 one? Here are both my config files, starting with clamav.conf:

 -- Start of
 clamav.conf---

 ##
 ## Example config file for the Clam AV daemon
 ## Please read the clamav.conf(5) manual before editing this file.
 ##


 # Comment or remove the line below.

 # Uncomment this option to enable logging.
 # LogFile must be writable for the user running the daemon.
 # Full path is required.
 #LogFile /tmp/clamd.log

 # By default the log file is locked for writing - the lock protects
 against
 # running clamd multiple times (if want to run another clamd, please
 # copy the configuration file, change the LogFile variable, and run
 # the daemon with --config-file option). That's why you shouldn't
 uncomment
 # this option.
 #LogFileUnlock

 # Maximal size of the log file. Default is 1 Mb.
 # Value of 0 disables the limit.
 # You may use 'M' or 'm' for megabytes (1M = 1m = 1048576 bytes)
 # and 'K' or 'k' for kilobytes (1K = 1k = 1024 bytes). To specify the
 size
 # in bytes just don't use modifiers.
 #LogFileMaxSize 2M

 # Log time with an each message.
 #LogTime

 # Log also clean files. May be useful in debugging but will drastically
 # increase the log size.
 #LogClean

 # Use system logger (can work together with LogFile).
 #LogSyslog

 # Enable verbose logging.
 #LogVerbose

 # This option allows you to save the process identifier of the listening
 # daemon (main thread).
 PidFile /var/run/clamd.pid

 # Optional path to the global temporary directory.
 # Default is system specific - usually /var/tmp or /tmp.
 TemporaryDirectory /var/lib/clamav/tmp

 # Path to the database directory.
 # Default is the hardcoded directory (mostly /usr/local/share/clamav,
 # but it depends on installation options).
 DatabaseDirectory /var/lib/clamav

 # The daemon works in local or network mode. Currently the local mode is
 # recommended for security reasons.

 # Path to the local socket. The daemon doesn't change the mode of the
 # created file (portability reasons). You may want to create it in a
 directory
 # which is only accessible for a user running daemon.
 LocalSocket /tmp/clamd

 # Remove stale socket after unclean shutdown.
 FixStaleSocket

 # TCP port address.
 #TCPSocket 3310

 # TCP address.
 # By default we bind to INADDR_ANY, probably not wise.
 # Enable the following to provide some degree of protection
 # from the outside world.
 #TCPAddr 127.0.0.1

 # Maximum length the queue of pending connections may grow to.
 # Default is 15.
 #MaxConnectionQueueLength 30

 # When activated, input stream (see STREAM command) will be saved to
 disk before
 # scanning - this allows scanning within archives.
 #StreamSaveToDisk

 # Close the connection if this limit is exceeded.
 #StreamMaxLength 10M

 # Maximal number of a threads running at the same time.
 # Default is 5, and it should be sufficient for a typical workstation.
 # You may need to increase threads number for a server machine.
 #MaxThreads 10

 # Thread (scanner - single task) will be stopped after this time
 (seconds).
 # Default is 180. Value of 0 disables the timeout. SECURITY HINT:
 Increase the
 # timeout instead of disabling it.
 #ThreadTimeout 500

 # Maximal depth the directories are scanned at.
 MaxDirectoryRecursion 15

 # Follow a directory symlinks.
 # SECURITY HINT: You should have enabled directory recursion limit to
 # avoid potential problems.
 FollowDirectorySymlinks

 # Follow regular file symlinks.
 FollowFileSymlinks

 # Do internal checks (eg. check the integrity of the database
 structures)
 # By default clamd checks itself every 3600 seconds (1 hour).
 SelfCheck 600

 # Execute a command when virus is found. In the command string %v and
 %f will
 # be replaced by the virus name and the infected file name respectively.
 #
 # SECURITY WARNING: Make sure the virus event command cannot be
 exploited,
 # eg. by using some 

[Clamav-users] Freshclam Error messages

[Steve Plemmons]

When I try to run freshclam on a Solaris 8 SPARC I get the following errors.

nemo# freshclam
ClamAV update process started at Thu Mar  4 10:37:56 2004
SECURITY WARNING: NO SUPPORT FOR DIGITAL SIGNATURES
Reading CVD header (main.cvd): OK
ERROR: Can't open new file ./fe2c2591272a5315 to write
open: Permission denied
ERROR: Can't download main.cvd from 210.22.201.152
Waiting 10 seconds...
ClamAV update process started at Thu Mar  4 10:38:07 2004
SECURITY WARNING: NO SUPPORT FOR DIGITAL SIGNATURES
Reading CVD header (main.cvd): OK
ERROR: Can't open new file ./d83a9adaea65e446 to write
open: Permission denied
ERROR: Can't download main.cvd from 210.22.201.152
Waiting 10 seconds...
ClamAV update process started at Thu Mar  4 10:38:18 2004
SECURITY WARNING: NO SUPPORT FOR DIGITAL SIGNATURES
Reading CVD header (main.cvd): OK
ERROR: Can't open new file ./068506789e044f1f to write
open: Permission denied
ERROR: Can't download main.cvd from 210.22.201.152
Waiting 10 seconds...

What did I miss?

Thanks,

Steve Plemmons
[EMAIL PROTECTED]



---
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id=1470alloc_id=3638op=click
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users

Re: [Clamav-users] Freshclam error in log file

[Jeff Ramsey]

Thanks. Seems to have worked fine.

On Mar 4, 2004, at 7:13 AM, John Vestrum wrote:

Take out the square brackets on NotifyClamd [/etc/clamav.conf]. The 
square
brackets signify that the filename is an optional argument, so if your
clamav.conf is in the default location, you could just leave the 
arguement
out entirely:

# Send the RELOAD command to clamd.
NotifyClamd
JohnV

On Thursday 04 March 2004 08:52 am, you wrote:
Hi all,
New to group, tried to search previous postings for this, read
everything in the docs group. I've got freshclam updating every two
hours, and it seems to work fine, with one small exception. After it
successfully downloads an update, I get a line in the config file that
says this:
'Error Can't parse configuration file.'

This is right after the line 'Database updated (20381 signatures) from
database.clamav.net (###.###.###.###).' I have checked and rechecked
the permissions on both clamav.conf and freshclam.conf in the /etc dir
and they are set g+wr u+wrx and the owner is clamav.clamav. What does
this error mean? Do I have a syntax in my config file? And if so, 
which
one? Here are both my config files, starting with clamav.conf:

-- Start of
clamav.conf---
##
## Example config file for the Clam AV daemon
## Please read the clamav.conf(5) manual before editing this file.
##
# Comment or remove the line below.

# Uncomment this option to enable logging.
# LogFile must be writable for the user running the daemon.
# Full path is required.
#LogFile /tmp/clamd.log
# By default the log file is locked for writing - the lock protects
against
# running clamd multiple times (if want to run another clamd, please
# copy the configuration file, change the LogFile variable, and run
# the daemon with --config-file option). That's why you shouldn't
uncomment
# this option.
#LogFileUnlock
# Maximal size of the log file. Default is 1 Mb.
# Value of 0 disables the limit.
# You may use 'M' or 'm' for megabytes (1M = 1m = 1048576 bytes)
# and 'K' or 'k' for kilobytes (1K = 1k = 1024 bytes). To specify the
size
# in bytes just don't use modifiers.
#LogFileMaxSize 2M
# Log time with an each message.
#LogTime
# Log also clean files. May be useful in debugging but will 
drastically
# increase the log size.
#LogClean

# Use system logger (can work together with LogFile).
#LogSyslog
# Enable verbose logging.
#LogVerbose
# This option allows you to save the process identifier of the 
listening
# daemon (main thread).
PidFile /var/run/clamd.pid

# Optional path to the global temporary directory.
# Default is system specific - usually /var/tmp or /tmp.
TemporaryDirectory /var/lib/clamav/tmp
# Path to the database directory.
# Default is the hardcoded directory (mostly /usr/local/share/clamav,
# but it depends on installation options).
DatabaseDirectory /var/lib/clamav
# The daemon works in local or network mode. Currently the local mode 
is
# recommended for security reasons.

# Path to the local socket. The daemon doesn't change the mode of the
# created file (portability reasons). You may want to create it in a
directory
# which is only accessible for a user running daemon.
LocalSocket /tmp/clamd
# Remove stale socket after unclean shutdown.
FixStaleSocket
# TCP port address.
#TCPSocket 3310
# TCP address.
# By default we bind to INADDR_ANY, probably not wise.
# Enable the following to provide some degree of protection
# from the outside world.
#TCPAddr 127.0.0.1
# Maximum length the queue of pending connections may grow to.
# Default is 15.
#MaxConnectionQueueLength 30
# When activated, input stream (see STREAM command) will be saved to
disk before
# scanning - this allows scanning within archives.
#StreamSaveToDisk
# Close the connection if this limit is exceeded.
#StreamMaxLength 10M
# Maximal number of a threads running at the same time.
# Default is 5, and it should be sufficient for a typical workstation.
# You may need to increase threads number for a server machine.
#MaxThreads 10
# Thread (scanner - single task) will be stopped after this time
(seconds).
# Default is 180. Value of 0 disables the timeout. SECURITY HINT:
Increase the
# timeout instead of disabling it.
#ThreadTimeout 500
# Maximal depth the directories are scanned at.
MaxDirectoryRecursion 15
# Follow a directory symlinks.
# SECURITY HINT: You should have enabled directory recursion limit to
# avoid potential problems.
FollowDirectorySymlinks
# Follow regular file symlinks.
FollowFileSymlinks
# Do internal checks (eg. check the integrity of the database
structures)
# By default clamd checks itself every 3600 seconds (1 hour).
SelfCheck 600
# Execute a command when virus is found. In the command string %v and
%f will
# be replaced by the virus name and the infected file name 
respectively.
#
# SECURITY WARNING: Make sure the virus event command cannot be
exploited,
#		eg. by using some special file name when %f is used.
#		Always use a full 

Re: [Clamav-users] Freshclam Error messages

[Alex S Moore]

On Thu, 4 Mar 2004 10:56:22 -0500
Steve Plemmons [EMAIL PROTECTED] wrote:

 SECURITY WARNING: NO SUPPORT FOR DIGITAL SIGNATURES
 What did I miss?
 

The gmp library, which is available for Solaris 8 and 9 from CSW at
www.blastwave.org.

Alex Moore


---
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id=1470alloc_id=3638op=click
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users

Re: [Clamav-users] Freshclam Error messages

[John Vestrum]

Even though you are running as root, freshclam drops privileges to user 
clamav. Therefore, user clamav must be able able to write to Clam's data 
directory, which is at $PREFIX/share/clamav. It should look something like 
this:

# ls -l /opt/clamav/share/clamav
-rw-r--r--   1 clamav   clamav  32727 Mar  4 09:19 daily.cvd
-rw-r--r--   1 clamav   clamav 944351 Feb 29 12:38 main.cvd

See also the --datadir and --user options in freshclam.conf.

The Security warning means you didn't have the Gnu MP library when you 
compiled freshclam; it's optional but highly recommended. Get it from 
http://www.gnu.org/software/gmp/.

JohnV


On Thursday 04 March 2004 09:56 am, you wrote:
 When I try to run freshclam on a Solaris 8 SPARC I get the following
 errors.

 nemo# freshclam
 ClamAV update process started at Thu Mar  4 10:37:56 2004
 SECURITY WARNING: NO SUPPORT FOR DIGITAL SIGNATURES
 Reading CVD header (main.cvd): OK
 ERROR: Can't open new file ./fe2c2591272a5315 to write
 open: Permission denied
 ERROR: Can't download main.cvd from 210.22.201.152
 Waiting 10 seconds...
 ClamAV update process started at Thu Mar  4 10:38:07 2004
 SECURITY WARNING: NO SUPPORT FOR DIGITAL SIGNATURES
 Reading CVD header (main.cvd): OK
 ERROR: Can't open new file ./d83a9adaea65e446 to write
 open: Permission denied
 ERROR: Can't download main.cvd from 210.22.201.152
 Waiting 10 seconds...
 ClamAV update process started at Thu Mar  4 10:38:18 2004
 SECURITY WARNING: NO SUPPORT FOR DIGITAL SIGNATURES
 Reading CVD header (main.cvd): OK
 ERROR: Can't open new file ./068506789e044f1f to write
 open: Permission denied
 ERROR: Can't download main.cvd from 210.22.201.152
 Waiting 10 seconds...

 What did I miss?

 Thanks,

 Steve Plemmons
 [EMAIL PROTECTED]



 ---
 This SF.Net email is sponsored by: IBM Linux Tutorials
 Free Linux tutorial presented by Daniel Robbins, President and CEO of
 GenToo technologies. Learn everything from fundamentals to system
 administration.http://ads.osdn.com/?ad_id=1470alloc_id=3638op=click
 ___
 Clamav-users mailing list
 [EMAIL PROTECTED]
 https://lists.sourceforge.net/lists/listinfo/clamav-users



---
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id=1470alloc_id=3638op=click
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users

[Clamav-users] freshclam error

[Niber]

Hello,

I receive this mail from
Cron [EMAIL PROTECTED] /usr/local/bin/freshclam --quiet -l 
/var/log/clam-update.log :

ERROR: Verification: Broken or not a CVD file.
ERROR: Verification: Broken or not a CVD file.
ERROR: Verification: Broken or not a CVD file.
When I manually run freshclam it looks fine :
# freshclam
ClamAV update process started at Tue Feb 24 21:27:57 2004
SECURITY WARNING: NO SUPPORT FOR DIGITAL SIGNATURES
Reading CVD header (main.cvd): OK
main.cvd is up to date (version: 19, sigs: 19987, f-level: 1, builder: ddm)
Reading CVD header (daily.cvd): OK
Downloading daily.cvd [*]
daily.cvd updated (version: 138, sigs: 808, f-level: 1, builder: tomek)
Database updated (20795 signatures) from database.clamav.net (64.18.103.6).
serveur:~#
Where is the problem with freshclam ?

Niber



---
SF.Net is sponsored by: Speed Start Your Linux Apps Now.
Build and deploy apps  Web services for Linux with
a free DVD software kit from IBM. Click Now!
http://ads.osdn.com/?ad_id=1356alloc_id=3438op=click
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users

Re: [Clamav-users] freshclam error

[Antony Stone]

On Tuesday 24 February 2004 8:36 pm, Niber wrote:

 Hello,

 I receive this mail from
 Cron [EMAIL PROTECTED] /usr/local/bin/freshclam --quiet -l
 /var/log/clam-update.log :

 ERROR: Verification: Broken or not a CVD file.

 When I manually run freshclam it looks fine

 Where is the problem with freshclam ?

Do you always receive the error from the cron job, or did it just happen one 
or two times?

Antony.

-- 
If the human brain were so simple that we could understand it,
we'd be so simple that we couldn't.

 Please reply to the list;
   please don't CC me.



---
SF.Net is sponsored by: Speed Start Your Linux Apps Now.
Build and deploy apps  Web services for Linux with
a free DVD software kit from IBM. Click Now!
http://ads.osdn.com/?ad_id=1356alloc_id=3438op=click
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users

Re: [Clamav-users] freshclam error

[Niber]

One or two times

Thanks for your help

Niber

Antony Stone a écrit :
Do you always receive the error from the cron job, or did it just happen one 
or two times?

Antony.





---
SF.Net is sponsored by: Speed Start Your Linux Apps Now.
Build and deploy apps  Web services for Linux with
a free DVD software kit from IBM. Click Now!
http://ads.osdn.com/?ad_id56alloc_id438op=click
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users

Re: [Clamav-users] freshclam error

[Antony Stone]

On Wednesday 25 February 2004 12:24 am, Niber wrote:

 Antony Stone a écrit :
  Do you always receive the error from the cron job, or did it just happen
  one or two times?

 One or two times

I would say that is normal then, simply due to synchronisation problems of 
the signatures database on the remote server.   We all get those from time to 
time.

Regards,

Antony.

-- 
A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
A: Top-posting.
Q: What is the most annoying thing on usenet and in e-mail?

 Please reply to the list;
   please don't CC me.



---
SF.Net is sponsored by: Speed Start Your Linux Apps Now.
Build and deploy apps  Web services for Linux with
a free DVD software kit from IBM. Click Now!
http://ads.osdn.com/?ad_id56alloc_id438op=click
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users

Re:[Clamav-users] freshclam ERROR: Can

[[EMAIL PROTECTED]]

 Hi Roberto,
 Did you get a answer to your problem? I'm having exactly the same problem on Solaris 
 9 running clamav
0.65.

I'm afraid not. I've upgraded to 0.65, but the problem stays exactly the same.
In fact, when I want to update the virusdb, I do it manually using a bash script
I've written on purpose.
If anyone would like more information to determine what the problem is, I'll be
happy to help.
Kind regards 
--
  .~.  Roberto Neri
  /V\  Registered Linux User 88943.
 /( )\ Registered Machine 37596.
 ^^-^^ Palermo, Italy.


 Thanks
 Peter Arnold

 ### Your email 
 Hi,
 I've just built from sources and installed clamav-0.60, according to the
 User Manual.

 My problem is that when I try to run this command
  
 freshclam -v -l /var/log/clam-update.log --log-verbose

 I *always* get the following errors messages

 Checking for a new database - started at Tue Sep 16 15:11:34 2003
 ERROR: Can't open new file ./5bb82cbfa3669e7f to write
 ERROR: Can't download viruses.db from clamav.elektrapro.com

 repeated for each entry in /usr/share/clamav/mirrors.txt

 Please note that:
 1) I've run the command as root
 2) I've created clam-update.log according to the User Manual, i.e. 
 -rw---1 clamav   root  761 Sep 16 15:16 /var/log/clam-update.log

 TIA for any help
 Roberto
 ##





---
This SF.net email is sponsored by: IBM Linux Tutorials.
Become an expert in LINUX or just sharpen your skills.  Sign up for IBM's
Free Linux Tutorials.  Learn everything from the bash shell to sys admin.
Click now! http://ads.osdn.com/?ad_id78alloc_id371op=click
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users

Re: [Clamav-users] freshclam ERROR: Can

[Fajar A. Nugraha]

That's permission problem. Or to be more specific, permission on 
clamav's database directory (/usr/local/share/clamav).

An easy solution is to run clamav (including freshclam) as root (check 
your ./configure command line, clamav.conf, command line path to 
freshclam, and on newer snapshots freshclam.conf)
A more secure way is to chown the db directory to clamav user.

Regards,

Fajar Nugraha

[EMAIL PROTECTED] wrote:

Hi Roberto, 
Did you get a answer to your problem? I'm having exactly the same problem on Solaris 9 running clamav 
   

0.65. 

I'm afraid not. I've upgraded to 0.65, but the problem stays exactly the same. 
In fact, when I want to update the virusdb, I do it manually using a bash script 
I've written on purpose. 
If anyone would like more information to determine what the problem is, I'll be 
happy to help. 
Kind regards 

 



---
This SF.net email is sponsored by: IBM Linux Tutorials.
Become an expert in LINUX or just sharpen your skills.  Sign up for IBM's
Free Linux Tutorials.  Learn everything from the bash shell to sys admin.
Click now! http://ads.osdn.com/?ad_id=1278alloc_id=3371op=click
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users

Re: [Clamav-users] freshclam ERROR: Can

[[EMAIL PROTECTED]]

 Can you send me the output of
 truss -o /tmp/freshclam.truss /path/to/freshclam
 (in private mail rather than to list) ?

 Thomas 


Thank you for your prompt response.
I'm sorry, but I've never heard of truss before, nor I can find any
program by that name in clamav 0.65 or in any package of my Linux
distribution (Slackware 9.1). 
Could you please tell me where I can find it.
King regards
--
  .~.  Roberto Neri
  /V\  Registered Linux User 88943.
 /( )\ Registered Machine 37596.
 ^^-^^ Palermo, Italy.




---
This SF.net email is sponsored by: IBM Linux Tutorials.
Become an expert in LINUX or just sharpen your skills.  Sign up for IBM's
Free Linux Tutorials.  Learn everything from the bash shell to sys admin.
Click now! http://ads.osdn.com/?ad_id78alloc_id371op=click
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users

Re: [Clamav-users] freshclam ERROR: Can

[Nigel Horne]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Monday 05 Jan 2004 10:13 am, [EMAIL PROTECTED] wrote:

 I'm sorry, but I've never heard of truss before, nor I can find any
 program by that name in clamav 0.65 or in any package of my Linux

The Linux equivalent of truss is strace.

- -Nigel

- -- 
Nigel Horne. Arranger, Composer, Typesetter.
NJH Music, Barnsley, UK.  ICQ#20252325
[EMAIL PROTECTED] http://www.bandsman.co.uk
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.3 (GNU/Linux)

iD8DBQE/+T04hTUd3VwpF6IRAr8rAJ0aMtjnUo+DPfKFgwAu1sdQ391TpQCfekqI
xFdtQn0CQFgRvVEa4wbybxE=
=E8NL
-END PGP SIGNATURE-



---
This SF.net email is sponsored by: IBM Linux Tutorials.
Become an expert in LINUX or just sharpen your skills.  Sign up for IBM's
Free Linux Tutorials.  Learn everything from the bash shell to sys admin.
Click now! http://ads.osdn.com/?ad_id78alloc_id371op=click
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users