Send clamav-users mailing list submissions to
clamav-users@lists.clamav.net
To subscribe or unsubscribe via the World Wide Web, visit
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
or, via email, send a message with subject or body 'help' to
[EMAIL PROTECTED]
You can reach the person managing the list at
[EMAIL PROTECTED]
When replying, please edit your Subject line so it is more specific
than "Re: Contents of clamav-users digest..."
Today's Topics:
1. Re: ClamAV takes long to scan mails (Jason Haar)
2. Re: clamav & Samba with on access anti virus scans (Paul Matthews)
3. freshclam takes forever to run (Karolis Dautartas)
4. Re: freshclam takes forever to run (Sander Holthaus)
5. Re: ClamAV takes long to scan mails (Sandeep Agarwal)
6. Re: clamav & Samba with on access anti virus scans (James Kosin)
7. Re: freshclam takes forever to run (Richard Feldmann)
8. Re: freshclam takes forever to run (Karolis Dautartas)
9. Re: freshclam takes forever to run (Karolis Dautartas)
10. Re: freshclam takes forever to run (Rob MacGregor)
11. Re: freshclam takes forever to run (Karolis Dautartas)
12. Re: freshclam takes forever to run (Frank Elsner)
13. Re: freshclam takes forever to run (Karolis Dautartas)
14. Re: freshclam takes forever to run (Steven Spence)
15. Re: freshclam takes forever to run (Sander Holthaus)
16. Re: freshclam takes forever to run (Frank Elsner)
17. Re: freshclam takes forever to run (Dennis Peterson)
18. Re: freshclam takes forever to run (Karolis Dautartas)
19. Re: freshclam takes forever to run (Karolis Dautartas)
----------------------------------------------------------------------
Message: 1
Date: Wed, 05 Apr 2006 07:49:04 +1200
From: Jason Haar <[EMAIL PROTECTED]>
Subject: Re: [Clamav-users] ClamAV takes long to scan mails
To: ClamAV users ML <clamav-users@lists.clamav.net>
Message-ID: <[EMAIL PROTECTED]>
Content-Type: text/plain; charset=ISO-8859-1
Sandeep Agarwal wrote:
checked the logs after sending a mail size 6MB.
reading the logs its clear that this is not clamd
problem. its something else, whats the "w_c:elapsed
time" in the log below ? i guess its the time waiting
in the queue. if yes how can this be fixed ?
You don't include the entire log for that particular mail message being
processed (and I'm sure the readers of this list appreciate that as this
isn't a ClamAV problem). One of those timestamps will be much larger
than the others, so that's the one that is the cause of the problem.
Are you sure you don't have an actual network problem? If none of the
Qmail-Scanner subprocesses is responsible for the large times, then
there is only one other option - network. Having mismatched duplex
settings on the server's Ethernet card can do this, as well as
long-distance-over-unreliable-links SMTP clients. i.e. maybe 1299 of
those 1300 seconds is actually how long it took the message to be
written to the queue - which indicates a slow network - not a software
problem. The new release of Qmail-Scanner specifically separates out
that time now - for this very reason.
--
Cheers
Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +64 3 9635 377 Fax: +64 3 9635 417
PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1
------------------------------
Message: 2
Date: Wed, 5 Apr 2006 13:18:27 +1000 (EST)
From: "Paul Matthews" <[EMAIL PROTECTED]>
Subject: Re: [Clamav-users] clamav & Samba with on access anti virus
scans
To: "ClamAV users ML" <clamav-users@lists.clamav.net>
Message-ID:
<[EMAIL PROTECTED]>
Content-Type: text/plain;charset=iso-8859-1
I've googled samba-vscan-clamav and I have come up with a few hits, but I
can't find anything to do with Fedora and does it require samba to be
installed by source, not by default installation from Fedora install?
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Paul Matthews wrote:
hi there,
i'm currently running a CentOS samba server and i'm looking at getting
clamav to do on-access scanning of files using clamav.
can someone point me in the direction of a how-to for setting this up?
or what programs should be used?
any information on this topical at all would be helpful.
Google the web for samba-vscan-clamav ... It is very simple to setup;
although, you get a serious performance hit for using on large files.
James Kosin
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFEMn26kNLDmnu1kSkRAuYeAJ0QcIMPpoy1sPHtLjRF/Y5bCANybACdESVY
OVC5uZeqoO9Vsi29t9KG2zc=
=6Wvo
-----END PGP SIGNATURE-----
--
Scanned by ClamAV - http://www.clamav.net
_______________________________________________
http://lurker.clamav.net/list/clamav-users.html
--
Paul Matthews
I.T Trainee | The Cathedral School
Ph (07) 47222 194 | Fax (07) 47222 111
PO Box 944 Aitkenvale Q 4814
E: [EMAIL PROTECTED]
W: www.cathedral.qld.edu.au
Anglican coeducation | Day and Boarding | Early Childhood to Year 12
Educating for life-long success
****************************************************************************
****************************************************************************
***********************************
IMPORTANT NOTICE REGARDING CONFIDENTIALITY
This electronic email message is intended only for the addressee and may
contain confidential information. If you are not the addressee, you are
notified that any transmission, distribution or photocopying of this email
is strictly prohibited. The confidentiality attached to this email is not
waived, lost or destroyed by reasons of a mistaken delivery to you.
------------------------------
Message: 3
Date: Thu, 06 Apr 2006 13:19:11 +0300
From: Karolis Dautartas <[EMAIL PROTECTED]>
Subject: [Clamav-users] freshclam takes forever to run
To: clamav-users@lists.clamav.net
Message-ID: <[EMAIL PROTECTED]>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
hello,
First of all, I have read the FAQ and looked through the archives, and
also did some google search on this topic. I know some other users are
having the same problem, but there was no solution mentioned in the
places that I have looked.
I run 2 mail servers with clamd. I have set crontab to update virus
database once every hour (44th minute). The problem is that it takes
forever to download daily.cvd. I have 50-100 frozen freshclam processes
on both of the servers.
Below is an extract from config file:
DNSDatabaseInfo current.cvd.clamav.net
...
DatabaseMirror db.US.clamav.net
...
DatabaseMirror database.clamav.net
If anyone knows how to solve this problem, I would be very interested to
find out :)
thanks,
Karolis
------------------------------
Message: 4
Date: Wed, 05 Apr 2006 12:33:37 +0200
From: Sander Holthaus <[EMAIL PROTECTED]>
Subject: Re: [Clamav-users] freshclam takes forever to run
To: ClamAV users ML <clamav-users@lists.clamav.net>
Message-ID: <[EMAIL PROTECTED]>
Content-Type: text/plain; charset=ISO-8859-1
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Karolis Dautartas wrote:
hello,
First of all, I have read the FAQ and looked through the archives,
and also did some google search on this topic. I know some other
users are having the same problem, but there was no solution
mentioned in the places that I have looked.
I run 2 mail servers with clamd. I have set crontab to update virus
database once every hour (44th minute). The problem is that it
takes forever to download daily.cvd. I have 50-100 frozen freshclam
processes on both of the servers.
Below is an extract from config file:
DNSDatabaseInfo current.cvd.clamav.net ... DatabaseMirror
db.US.clamav.net ... DatabaseMirror database.clamav.net
If anyone knows how to solve this problem, I would be very
interested to find out :)
thanks, Karolis
Which version?
What does your freshclam log say? Tried verbose option?
Why run Freshclam from cron instead of the freshclam daemon?
In which state are those frozen processes, e.g. what are doing?
Kind Regards,
Sander Holthaus
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2.2 (MingW32)
iD8DBQFEM50BVf373DysOTURAuNiAJ0T7mcv21bglS5NtrQhA/NLm60ixgCfWDqc
UVkptRGa4GCzErlVdUdBJCg=
=M74L
-----END PGP SIGNATURE-----
------------------------------
Message: 5
Date: Wed, 5 Apr 2006 11:57:03 +0100 (BST)
From: Sandeep Agarwal <[EMAIL PROTECTED]>
Subject: Re: [Clamav-users] ClamAV takes long to scan mails
To: ClamAV users ML <clamav-users@lists.clamav.net>
Message-ID: <[EMAIL PROTECTED]>
Content-Type: text/plain; charset=iso-8859-1
--- Jason Haar <[EMAIL PROTECTED]> wrote:
Sandeep Agarwal wrote:
>
> checked the logs after sending a mail size 6MB.
> reading the logs its clear that this is not clamd
> problem. its something else, whats the
"w_c:elapsed
> time" in the log below ? i guess its the time
waiting
> in the queue. if yes how can this be fixed ?
>
You don't include the entire log for that particular
mail message being
processed (and I'm sure the readers of this list
appreciate that as this
isn't a ClamAV problem). One of those timestamps
will be much larger
than the others, so that's the one that is the cause
of the problem.
this is the only details in the log file for this
process. it seems that the server is taking long in
receiving mails.
# cat qmail-queue.log | grep ":31100:"
Tue, 04 Apr 2006 16:35:41 IST:31100: +++ starting
debugging for process 31100 by uid=90
Tue, 04 Apr 2006 17:02:25 IST:31100: w_c: elapsed time
from start 1604.306495 secs
Tue, 04 Apr 2006 17:02:26 IST:31100:
return-path='[EMAIL PROTECTED]',
recips='[EMAIL PROTECTED]'
Tue, 04 Apr 2006 17:02:26 IST:31100: from='Sandeep
Agarwal <[EMAIL PROTECTED]>', subj='Fwd: axe
effect!!', via SMTP from 206.190.48.98
Tue, 04 Apr 2006 17:03:11 IST:31100: clamdscan:
finished scan in 44.9711 secs
Tue, 04 Apr 2006 17:03:11 IST:31100: SA: message too
big - skip it
Tue, 04 Apr 2006 17:03:11 IST:31100: p_s: finished
scan in 0.011766 secs
Tue, 04 Apr 2006 17:03:11 IST:31100: ini_sc: finished
scan of
"/var/spool/qmailscan/tmp/ngblhost1114414874176031100"...
Tue, 04 Apr 2006 17:03:11 IST:31100: ------ Process
31100 finished. Total of 1650.008028 secs
Are you sure you don't have an actual network
problem?
can you guide me how can i check that its not a
network problem.
If none of the
Qmail-Scanner subprocesses is responsible for the
large times, then
there is only one other option - network. Having
mismatched duplex
settings on the server's Ethernet card can do this,
as well as
long-distance-over-unreliable-links SMTP clients.
i.e. maybe 1299 of
those 1300 seconds is actually how long it took the
message to be
written to the queue - which indicates a slow
network - not a software
problem. The new release of Qmail-Scanner
specifically separates out
that time now - for this very reason.
Thanks for the help
Sandeep
__________________________________________________________
Yahoo! India Matrimony: Find your partner now. Go to
http://yahoo.shaadi.com
------------------------------
Message: 6
Date: Wed, 05 Apr 2006 09:26:04 -0400
From: James Kosin <[EMAIL PROTECTED]>
Subject: Re: [Clamav-users] clamav & Samba with on access anti virus
scans
To: ClamAV users ML <clamav-users@lists.clamav.net>
Message-ID: <[EMAIL PROTECTED]>
Content-Type: text/plain; charset=ISO-8859-1
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Paul Matthews wrote:
I've googled samba-vscan-clamav and I have come up with a few hits,
but I can't find anything to do with Fedora and does it require
samba to be installed by source, not by default installation from
Fedora install?
Paul,
(1) Don't top-post.
(2) Try building from my source RPM.
http://support.intcomgrp.com/mirror/fedora-core/beta/src/samba-vscan-clamav-0.4.0-2.fc1.src.rpm
I can't guarantee it will work....
PS: You also need the samba source RPM installed and '-bp' ed at
least to get the vscan-clamav module to compile.
James
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFEM8VskNLDmnu1kSkRAj90AJ9CAVpEH1crJkEcp05oVnhHPDBTPACfSN56
PR/7eJywxfQnAzXsDCC5T5o=
=UXx3
-----END PGP SIGNATURE-----
--
Scanned by ClamAV - http://www.clamav.net
------------------------------
Message: 7
Date: Wed, 5 Apr 2006 07:29:18 -0600
From: Richard Feldmann <[EMAIL PROTECTED]>
Subject: Re: [Clamav-users] freshclam takes forever to run
To: clamav-users@lists.clamav.net
Message-ID: <[EMAIL PROTECTED]>
Content-Type: text/plain; charset="us-ascii"
Hi,
Is there a mirror closer to you than the US one?
Regards,
Richard
--
Did this email or post help you? If so, please rate
me at affero: http://rate.affero.net/RhunDraco
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 191 bytes
Desc: not available
Url :
http://lists.clamav.net/pipermail/clamav-users/attachments/20060405/f3464085/attachment.pgp
------------------------------
Message: 8
Date: Thu, 06 Apr 2006 16:37:06 +0300
From: Karolis Dautartas <[EMAIL PROTECTED]>
Subject: Re: [Clamav-users] freshclam takes forever to run
To: ClamAV users ML <clamav-users@lists.clamav.net>
Message-ID: <[EMAIL PROTECTED]>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Is there a mirror closer to you than the US one?
The servers we have are located in US. They have very fast redundant
connections via 6 bandwidth providers. There should not be any
connection issues between our servers and other US locations.
What is a normal time for daily.cvd to be downloaded?
I remember it used to happen in seconds the day that I installed clamav.
I actually have a possibility to host a mirror. Do you think it would
make sense to create our own mirror and then download updates from it?
Karolis
------------------------------
Message: 9
Date: Thu, 06 Apr 2006 16:56:02 +0300
From: Karolis Dautartas <[EMAIL PROTECTED]>
Subject: Re: [Clamav-users] freshclam takes forever to run
To: ClamAV users ML <clamav-users@lists.clamav.net>
Message-ID: <[EMAIL PROTECTED]>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Which version?
It was 0.87. After reading your email I upgraded to 0.88.1
What does your freshclam log say?
It had been disabled in the config files. I have enabled it now.
Aparently the log says something very similar to what I get when
executing program on the shell. On the shell I get the following:
ClamAV update process started at Wed Apr 5 13:27:16 2006
main.cvd is up to date (version: 37, sigs: 46700, f-level: 7, builder:
ccordes)
Downloading daily.cvd [*]
ERROR: Mirrors are not fully synchronized. Please try again later.
Trying again in 5 secs...
ClamAV update process started at Wed Apr 5 13:33:27 2006
main.cvd is up to date (version: 37, sigs: 46700, f-level: 7, builder:
ccordes)
Downloading daily.cvd [*]
ERROR: Mirrors are not fully synchronized. Please try again later.
Trying again in 5 secs...
ClamAV update process started at Wed Apr 5 13:39:50 2006
main.cvd is up to date (version: 37, sigs: 46700, f-level: 7, builder:
ccordes)
Downloading daily.cvd [\]
This time it took about 15 minutes for the process to finish.
> Tried verbose option?
>
Not until I have read your email. I have launched verbose version now,
it is still running ...
I also tried to fetch the main.cvd file with wget. It took several
minutes to establish connection, and the transfer rate is about 100
bytes per second.
Why run Freshclam from cron instead of the freshclam daemon?
No idea. It was suggested to run it that way at the time I installed it
for the first time. And that was probably more than a year ago.
In which state are those frozen processes, e.g. what are doing?
Not sure, I think they are still "downloading" :)
I have several processes from Mar 20, then Mar 22, Mar 27, then a lot of
processes from Mar 29, 30, 31, Apr 01, 02, 03...
Could this be that the mirrors are overloaded? I really think I can
contribute to this software by hosting one of the mirrors and at least
have normal downloads of updates.
Karolis
------------------------------
Message: 10
Date: Wed, 5 Apr 2006 15:06:29 +0100
From: "Rob MacGregor" <[EMAIL PROTECTED]>
Subject: Re: [Clamav-users] freshclam takes forever to run
To: "ClamAV users ML" <clamav-users@lists.clamav.net>
Message-ID:
<[EMAIL PROTECTED]>
Content-Type: text/plain; charset=UTF-8
On 4/6/06, Karolis Dautartas <[EMAIL PROTECTED]> wrote:
Could this be that the mirrors are overloaded? I really think I can
contribute to this software by hosting one of the mirrors and at least
have normal downloads of updates.
Did you read what you posted? The error:
ERROR: Mirrors are not fully synchronized. Please try again later.
Trying again in 5 secs...
Would suggest a problem with the mirror you're connecting to (though
the "5 secs" seems to be more like 5 minutes).
--
Please keep list traffic on the list.
Rob MacGregor
Whoever fights monsters should see to it that in the process he
doesn't become a monster. Friedrich Nietzsche
------------------------------
Message: 11
Date: Thu, 06 Apr 2006 17:11:41 +0300
From: Karolis Dautartas <[EMAIL PROTECTED]>
Subject: Re: [Clamav-users] freshclam takes forever to run
To: ClamAV users ML <clamav-users@lists.clamav.net>
Message-ID: <[EMAIL PROTECTED]>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Did you read what you posted? The error:
ERROR: Mirrors are not fully synchronized. Please try again later.
Trying again in 5 secs...
Would suggest a problem with the mirror you're connecting to (though
the "5 secs" seems to be more like 5 minutes).
I did read it. How does that explain 100 processes running on server for
weeks? I have let clamav to choose mirrors automatically for years...
Karolis
------------------------------
Message: 12
Date: Wed, 5 Apr 2006 16:14:01 +0200
From: Frank Elsner <[EMAIL PROTECTED]>
Subject: Re: [Clamav-users] freshclam takes forever to run
To: ClamAV users ML <clamav-users@lists.clamav.net>
Message-ID: <[EMAIL PROTECTED]>
Content-Type: text/plain; charset=US-ASCII
On Thu, 06 Apr 2006 16:56:02 +0300 Karolis Dautartas wrote:
[ ... ]
I also tried to fetch the main.cvd file with wget. It took several
minutes to establish connection, and the transfer rate is about 100
bytes per second.
I bet your connecion ist the problem.
--Frank Elsner
------------------------------
Message: 13
Date: Thu, 06 Apr 2006 17:40:12 +0300
From: Karolis Dautartas <[EMAIL PROTECTED]>
Subject: Re: [Clamav-users] freshclam takes forever to run
To: ClamAV users ML <clamav-users@lists.clamav.net>
Message-ID: <[EMAIL PROTECTED]>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
I also tried to fetch the main.cvd file with wget. It took several
minutes to establish connection, and the transfer rate is about 100
bytes per second.
I bet your connecion ist the problem.
I tried to download clamav binaries from various mirrors from
sourceforge. The size of the file is 5.3 MB
mesh.dl.sourceforge.net: avg 425.25 KB/s, total 12.515 seconds
jaist.dl.sourceforge.net: avg 311.16 KB/s, total 17.190 seconds
heanet.dl.sourceforge.net: avg 491.30 KB/s, total 10.881 seconds
For some reason I am sure that our connection can handle more than 100
bytes per second :)
I have also tried to download this file:
http://clamav-sj.viaverio.com/daily.cvd
It took less than a second (0.949s, 384.85 KB/s).
However, downloading from http://database.clamav.net/daily.cvd agian
takes forever... no matter how many times I try.
The way I see it, slowness is probably somewhere on the other end.
Should I specify a single mirror instead of letting clamav decide?
Karolis
------------------------------
Message: 14
Date: Wed, 05 Apr 2006 08:42:27 -0600
From: Steven Spence <[EMAIL PROTECTED]>
Subject: Re: [Clamav-users] freshclam takes forever to run
To: ClamAV users ML <clamav-users@lists.clamav.net>
Message-ID: <[EMAIL PROTECTED]>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Karolis Dautartas wrote:
>> Did you read what you posted? The error:
ERROR: Mirrors are not fully synchronized. Please try again later.
Trying again in 5 secs...
Would suggest a problem with the mirror you're connecting to (though
the "5 secs" seems to be more like 5 minutes).
I did read it. How does that explain 100 processes running on server for
weeks? I have let clamav to choose mirrors automatically for years...
Karolis
You sessions have apparently stalled out or are transfering at such a slow
rate it is taking that long. If you really want to get into the nitty
gritty of why it is not working you could start tcpdumping. I would
say you just don't have good connectivity to the US servers or you have
some firewall problems. Judging from your country code in your email you
may want to try using clamav.vtu.lt instead.
------------------------------
Message: 15
Date: Wed, 05 Apr 2006 16:48:02 +0200
From: Sander Holthaus <[EMAIL PROTECTED]>
Subject: Re: [Clamav-users] freshclam takes forever to run
To: ClamAV users ML <clamav-users@lists.clamav.net>
Message-ID: <[EMAIL PROTECTED]>
Content-Type: text/plain; charset=ISO-8859-1
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Karolis Dautartas wrote:
Which version?
It was 0.87. After reading your email I upgraded to 0.88.1
Good. Which OS are you on?
What does your freshclam log say?
It had been disabled in the config files. I have enabled it now.
Aparently the log says something very similar to what I get when
executing program on the shell. On the shell I get the following:
ClamAV update process started at Wed Apr 5 13:27:16 2006 main.cvd
is up to date (version: 37, sigs: 46700, f-level: 7, builder:
ccordes) Downloading daily.cvd [*] ERROR: Mirrors are not fully
synchronized. Please try again later. Trying again in 5 secs...
ClamAV update process started at Wed Apr 5 13:33:27 2006 main.cvd
is up to date (version: 37, sigs: 46700, f-level: 7, builder:
ccordes) Downloading daily.cvd [*] ERROR: Mirrors are not fully
synchronized. Please try again later. Trying again in 5 secs...
ClamAV update process started at Wed Apr 5 13:39:50 2006 main.cvd
is up to date (version: 37, sigs: 46700, f-level: 7, builder:
ccordes) Downloading daily.cvd [\]
This time it took about 15 minutes for the process to finish.
That is way too long. Should be a matter of seconds or tens of seconds
if the server extremely loaded. Try changing the default mirror to
another one.
Tried verbose option?
Not until I have read your email. I have launched verbose version
now, it is still running ...
I also tried to fetch the main.cvd file with wget. It took several
minutes to establish connection, and the transfer rate is about 100
bytes per second.
Why run Freshclam from cron instead of the freshclam daemon?
No idea. It was suggested to run it that way at the time I
installed it for the first time. And that was probably more than a
year ago.
Personally, I'm more in favor of running freshclam as a daemon. It
would at least stop you from getting a zillion processes like you have
now. Do note that I consider 100+ freshclam processes a bug. It
shouldn't be allowed to happen, or at least generate a severe warming
somewhere.
Second, I take it not all those processes are downloading anymore.
Netstat should tell you that.
In which state are those frozen processes, e.g. what are doing?
Not sure, I think they are still "downloading" :)
I have several processes from Mar 20, then Mar 22, Mar 27, then a
lot of processes from Mar 29, 30, 31, Apr 01, 02, 03...
Could this be that the mirrors are overloaded? I really think I can
contribute to this software by hosting one of the mirrors and at
least have normal downloads of updates.
I would start with killing all processes. There is no point if having
so many processes doing the same, and they may actually be causing
more problems.
Karolis
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2.2 (MingW32)
iD8DBQFEM9iiVf373DysOTURAqumAKDHKw0yccGd1ZpnvX31YQ4XaWRn2ACg11SU
fH3kqPXE2Bykp7BYGnY5aFQ=
=q4E4
-----END PGP SIGNATURE-----
------------------------------
Message: 16
Date: Wed, 5 Apr 2006 16:48:49 +0200
From: Frank Elsner <[EMAIL PROTECTED]>
Subject: Re: [Clamav-users] freshclam takes forever to run
To: ClamAV users ML <clamav-users@lists.clamav.net>
Message-ID: <[EMAIL PROTECTED]>
Content-Type: text/plain; charset=US-ASCII
On Thu, 06 Apr 2006 17:40:12 +0300 Karolis Dautartas wrote:
>> I also tried to fetch the main.cvd file with wget. It took several
>> minutes to establish connection, and the transfer rate is about 100
>> bytes per second.
>
> I bet your connecion ist the problem.
I tried to download clamav binaries from various mirrors from
sourceforge. The size of the file is 5.3 MB
mesh.dl.sourceforge.net: avg 425.25 KB/s, total 12.515 seconds
jaist.dl.sourceforge.net: avg 311.16 KB/s, total 17.190 seconds
heanet.dl.sourceforge.net: avg 491.30 KB/s, total 10.881 seconds
For some reason I am sure that our connection can handle more than 100
bytes per second :)
I have also tried to download this file:
http://clamav-sj.viaverio.com/daily.cvd
It took less than a second (0.949s, 384.85 KB/s).
However, downloading from http://database.clamav.net/daily.cvd agian
takes forever... no matter how many times I try.
traceoute may help you to detect the bottleneck.
Thy it with the location mentioned.
--Frank Elsner
------------------------------
Message: 17
Date: Wed, 05 Apr 2006 08:09:36 -0700
From: Dennis Peterson <[EMAIL PROTECTED]>
Subject: Re: [Clamav-users] freshclam takes forever to run
To: ClamAV users ML <clamav-users@lists.clamav.net>
Message-ID: <[EMAIL PROTECTED]>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Karolis Dautartas wrote:
I also tried to fetch the main.cvd file with wget. It took several
minutes to establish connection, and the transfer rate is about 100
bytes per second.
I bet your connecion ist the problem.
I tried to download clamav binaries from various mirrors from
sourceforge. The size of the file is 5.3 MB
mesh.dl.sourceforge.net: avg 425.25 KB/s, total 12.515 seconds
jaist.dl.sourceforge.net: avg 311.16 KB/s, total 17.190 seconds
heanet.dl.sourceforge.net: avg 491.30 KB/s, total 10.881 seconds
For some reason I am sure that our connection can handle more than 100
bytes per second :)
I have also tried to download this file:
http://clamav-sj.viaverio.com/daily.cvd
It took less than a second (0.949s, 384.85 KB/s).
However, downloading from http://database.clamav.net/daily.cvd agian
takes forever... no matter how many times I try.
The A record list for database.clamav.net is quite large. Is it possible
your DNS is the problem? Have you tried to pull the information from any
(even each) single mirror rather than accepting the DNS RR record?
The reason I ask is because if there were a chronic problem with the
mirrors this thread would be far longer than it is because we'd all be
complaining.
Try editing your host table or freshclam.conf file to pull from a
specific site.
dp
------------------------------
Message: 18
Date: Thu, 06 Apr 2006 18:26:40 +0300
From: Karolis Dautartas <[EMAIL PROTECTED]>
Subject: Re: [Clamav-users] freshclam takes forever to run
To: ClamAV users ML <clamav-users@lists.clamav.net>
Message-ID: <[EMAIL PROTECTED]>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
traceoute may help you to detect the bottleneck.
Thy it with the location mentioned.
It appears as if the destination server is blocking ICMP packets:
1 66.115.176.2 0.342 ms 0.204 ms 0.202 ms
2 213.248.90.89 0.364 ms 0.313 ms 0.318 ms
3 213.248.80.141 12.711 ms 14.049 ms 12.933 ms
4 213.248.88.30 111.795 ms 14.438 ms 14.758 ms
5 67.17.65.78 102.845 ms 102.719 ms 102.079 ms
6 64.210.31.158 102.831 ms 102.643 ms 102.807 ms
7 212.39.91.13 143.619 ms 145.392 ms 143.467 ms
8 212.39.64.34 143.900 ms 144.786 ms 143.220 ms
9 213.16.50.206 179.940 ms 180.885 ms 180.894 ms
10 80.72.64.66 144.861 ms 143.853 ms 143.741 ms
11 80.72.64.65 146.584 ms 144.793 ms 145.256 ms
12 * * *
.......
# host database.clamav.net
database.clamav.net is an alias for db.local.clamav.net.
db.local.clamav.net is an alias for db.northeu.clamav.net.
db.northeu.clamav.net has address 83.148.101.196
db.northeu.clamav.net has address 87.120.40.28
db.northeu.clamav.net has address 192.129.4.120
db.northeu.clamav.net has address 193.219.149.170
db.northeu.clamav.net has address 195.95.205.245
db.northeu.clamav.net has address 212.7.0.71
Karolis
------------------------------
Message: 19
Date: Thu, 06 Apr 2006 18:28:26 +0300
From: Karolis Dautartas <[EMAIL PROTECTED]>
Subject: Re: [Clamav-users] freshclam takes forever to run
To: ClamAV users ML <clamav-users@lists.clamav.net>
Message-ID: <[EMAIL PROTECTED]>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
I would start with killing all processes. There is no point if having
so many processes doing the same, and they may actually be causing
more problems.
Finding a good mirror manually and setting it as default mirror appears
to have solved the problem. I will look into running freshclam as a
daemon though. Thanks a lot for your help so far :)
Karolis
------------------------------
_______________________________________________
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
End of clamav-users Digest, Vol 19, Issue 2
*******************************************
