On May 3, 2004, at 3:58 AM, Niek wrote:
Mark Novak wrote:Hello all,
I recently upgraded my Clamav from 0.70-rc to clamav-0.70. After the upgrade my sigtool stopped working as it used to. For example:
[EMAIL PROTECTED] log]# sigtool -i /var/lib/clamav/daily.cvd
Build time: 29 Apr 2004 07-50 +0200
Version: 294
# of signatures: 1075
Functionality level: 2
Builder: diego
MD5: 4a5bcb4e2e696c4e918ef8dd8d0b2ae2
Digital signature: FUJWP7lblQugBK02KPsQMF2Seg/ IHEAanlB56P7AxZ84pLAfGnH1zxtW+B2YZyJelLSEyZOprZhHSccdoAzXMD9Q4hUipjpMJ 8+ v9RlqHJpXrogrpP8vDJsjeb+N93ikPEa4TwEVmZ8aHgcfNUbhXIOQD4wOEWBWdcya9GRS+ Ke
Verification OK.
[EMAIL PROTECTED] log]#
But if I try to grep for a specific virus, I get nothing:
[EMAIL PROTECTED] log]# sigtool -l |grep -i somefool
[EMAIL PROTECTED] log]#
Clam is catching a ton of somefool variants every hour, as well as the newest Bagle variants that I see listed in the update emails, but sigtool won't show them.
Any and all ideas are appreciated!
Thanks,
Mark Novak
Mark,
Maybe the path for the cvd files changed after your upgrade, and sigtool and clam are looking in the old location for cvd files?
Regards,
Niek
What is odd is that I was using the /usr/local/share/clamav path but changed it to /var/lib/clamav because that is what freshclam.conf has as it's default. I changed the line in the /etc/clamav.conf to reflect the /var/lib/clamav location.
Clam is catching the newest viruses, and the database is getting updated.
It is just sigtool that doesn't work when I do a "sigtool -l | grep -i somevirusnamehere"
Kind of strange.
Thanks,
Mark
--- [This E-mail scanned for viruses by Declude Virus]
-------------------------------------------------------
This SF.Net email is sponsored by: Oracle 10g
Get certified on the hottest thing ever to hit the market... Oracle 10g. Take an Oracle 10g class now, and we'll give you the exam FREE. http://ads.osdn.com/?ad_id=3149&alloc_id=8166&op=click
_______________________________________________
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users
