[EMAIL PROTECTED] wrote: > On Thursday 25 October 2007 04:42:59 René Berber wrote: > >> linuxmaillists wrote: >> >>> I am getting this error message in my root e-mail: >>> >>> Could not connect to ClamAV daemon: Connection refused >>> Looks like ClamAV daemon is not OK. Check up database integrity >>> and restart daemon >>> >>> I cannot find any information for how to do what the above >>> error message suggests. If the information is in the man page >>> for ClamAv where and what is it? >>> >> No it's not in the manpage, the procedure depends on what you >> have installed alongside clamd, clamdmon is obvious, some script >> that downloads third party databases probably, perhaps something >> else. >> >> >>> I also can't find any information on how to use this clamdmon >>> and there is no man page for it. >>> >> Clamdmon is a program and a script, you are receiving the email >> that the script sends (from cron) when it detects a problem. The >> script also tries to restart clamd, so first thing is to check if >> clamd is running (the script was successful restarting clamd), if >> not then you should look into the clamd log and see, at the end, >> if an error is reported; perhaps that will give you enough clues >> to determine what is wrong. >> >> If clamd still can't start, then you probably have to move out of >> the way each of the 3rd party databases, and see which one is the >> cause of the problem. >> > > Thanks for the info > _______________________________________________ > Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net > http://lurker.clamav.net/list/clamav-users.html > > Probably related - several of our servers this morning downloaded a sanesecurity gzip file that gunzip would fail to unzip:
gunzip: stdin: invalid compressed data--format violated clamd would fail to start because of the bad data. Quick fix is to delete all files in /var/lib/clamav and restart clamd and reload all databases, etc... If you're using scamp.sh to download sanesecurity sigs, modify it to test for the return code of gunzip. -- Roberto Ullfig - [EMAIL PROTECTED] _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html
