On Mon, 14 Jul 2008 15:59:13 -0500
"Oscar Usifer" <[EMAIL PROTECTED]> wrote:

> -- /var/log/clamav/clamd.log

The logs prove that this was (is?) a problem with your clamav installation.
Most likely, freshclam was updating files in another directory.

See - clamd loads the same number (231780) of signatures on Jun 21 and 22:

> Sat Jun 21 02:35:18 2008 -> Reading databases from /var/lib/clamav
> Sat Jun 21 02:35:21 2008 -> Database correctly reloaded (231780 signatures)
> Sat Jun 21 09:35:18 2008 -> SelfCheck: Database modification detected. 
> Forcing reload.
> Sat Jun 21 09:35:18 2008 -> Reading databases from /var/lib/clamav
> Sat Jun 21 09:35:22 2008 -> Database correctly reloaded (231780 signatures)
> Sat Jun 21 10:35:19 2008 -> SelfCheck: Database modification detected. 
> Forcing reload.
> Sat Jun 21 10:35:20 2008 -> Reading databases from /var/lib/clamav
> Sat Jun 21 10:35:23 2008 -> Database correctly reloaded (231780 signatures)
[...]
> Sun Jun 22 10:44:56 2008 -> Reading databases from /var/lib/clamav
> Sun Jun 22 10:44:59 2008 -> Database correctly reloaded (231780 signatures)
> Sun Jun 22 13:35:27 2008 -> SelfCheck: Database modification detected. 
> Forcing reload.
> Sun Jun 22 13:35:28 2008 -> Reading databases from /var/lib/clamav
> Sun Jun 22 13:35:31 2008 -> Database correctly reloaded (231780 signatures)
[...]
> Mon Jun 23 10:35:41 2008 -> Database correctly reloaded (231780 signatures)
> Mon Jun 23 12:25:30 2008 -> SelfCheck: Database status OK.
> Mon Jun 23 12:49:50 2008 -> Reading databases from /var/lib/clamav
> Mon Jun 23 12:49:51 2008 -> Database correctly reloaded (0 signatures)

At some point the old database files disappear (if you're using clamav from your
distribution they could be removed during some update).

But at the same time, freshclam shows a proper number of signatures and
keeps the database up to date:

> /var/log/clamav/freshclam.log
> 
> Mon Jun 23 10:35:35 2008 -> Received signal: wake up
> Mon Jun 23 10:35:35 2008 -> ClamAV update process started at Mon Jun 23 
> 10:35:35 2008
> Mon Jun 23 10:35:35 2008 -> main.cvd is up to date (version: 46, sigs: 
> 231834, f-level: 26, builder: sven)
> Mon Jun 23 10:35:36 2008 -> Downloading daily-7542.cdiff [100%]
> Mon Jun 23 10:35:37 2008 -> daily.cld updated (version: 7542, sigs: 94559, 
> f-level: 31, builder: sven)
> Mon Jun 23 10:35:37 2008 -> Database updated (326393 signatures) from 
> db.us.clamav.net (IP: 65.120.238.2)

Please make sure that DatabaseDirectory points to the same path in both
clamd.conf and freshclam.conf

-- 
   oo    .....         Tomasz Kojm <[EMAIL PROTECTED]>
  (\/)\.........         http://www.ClamAV.net/gpg/tkojm.gpg
     \..........._         0DCA5A08407D5288279DB43454822DC8985A444B
       //\   /\              Mon Jul 14 23:07:53 CEST 2008
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Reply via email to