Hi Guy, This is the captured text from Ethereal (Text mode)
I open 2 screen console Screen 1: [EMAIL PROTECTED] src]# tethereal -F libpcap -f udp Capturing on eth0 0.000000 202.136.73.3 -> 202.136.64.52 DNS Standard query TXT current.cvd.clamav.net 0.707822 202.136.64.52 -> 202.136.73.3 DNS Standard query response TXT 0.708643 202.136.73.3 -> 202.136.64.52 DNS Standard query A db.sg.clamav.net 2.520258 202.136.64.52 -> 202.136.73.3 DNS Standard query response A 203.81.37.58 Screen 2: [EMAIL PROTECTED] root]# freshclam ClamAV update process started at Tue May 17 22:39:18 2005 WARNING: DNS record is older than 3 hours. WARNING: Invalid DNS reply. Falling back to HTTP mode. Reading CVD header (main.cvd): OK (IMS) main.cvd is up to date (version: 31, sigs: 33079, f-level: 4, builder: tkojm) Reading CVD header (daily.cvd): OK daily.cvd is up to date (version: 882, sigs: 1320, f-level: 5, builder: arnaud) Please advise. Thx & Rgds, Awie ----- Original Message ----- From: "Guy Van Den Bergh" <[EMAIL PROTECTED]> To: "ClamAV users ML" <clamav-users@lists.clamav.net> Sent: Tuesday, May 17, 2005 9:46 PM Subject: Re: [Clamav-users] Freshclam fall back to HTTP > On Tue, 2005-05-17 at 15:34, Awie wrote: > > > > > > All is looking good as far as I'm concerned. > > > I would start sniffing on your server (with ethereal) to see what's > > > happening on the wire. Any experience with that? > > > > > > > I never use Ethereal (for Linux) before. However, I will learn how to use > > it. > > One last hint: use a filter like "udp port 53" to see only dns traffic. > Otherwise you will probably get lots and lots of noise. > > > > > I will inform you when I will be ready. Thanks for your kind help. > > Good luck! > > -- > Guy Van Den Bergh > Netwerkbeheerder > Hogeschool Antwerpen > > http://www.ha.be > _______________________________________________ > http://lurker.clamav.net/list/clamav-users.html > _______________________________________________ http://lurker.clamav.net/list/clamav-users.html
