Chris wrote: > What is the criteria used for submitting these stats? For instance when I > first brought 94.1 on-line after installation I saw this in my hourly syslog > snip: > > SubmitDetectionStats: Submitted 50 records > This number is divisible by ten, as are all the others mentioned in the log excerpt you posted. > Other than these I'll see: > > Thu Nov 6 21:15:27 2008 -> SubmitDetectionStats: Not enough recent data for > submission > I think that means there were less than ten entries in your log that are waiting to be submitted to the stats server. > Question is why is there not enough data for submission at the above > date/time > when the next time freshclam is run 10 records are submitted. For instance > between Nov 6 22:50:44 and Nov 9 11:21:56 2008 according to my clamd log > there were there were nine malwares detected yet 10 were submitted. I'm just > trying to understand what 'trips' the stats submission. > > Thanks > > From your logs and from what has been said earlier, I'm assuming this: freshclam is only willing to submit ten virus detections each time it contacts the stats server at a time. Thus, when freshclam submitted stats before November 6 22:50:44, there were more than ten detections, but at Nov 6 21:15:27, there were less than ten detections not yet submitted. Thus, when the 10 detections were submitted at Nov 6 22:50:44, there were a few left over. This would allow clamAV to detect less than 10 viruses after Nov 6 22:50:44 and before Nov 9 11:21:56 while accumulating at least 10 unsubmitted virus detections including those that were left over on NOv 6 22:50:44. What I've said is too confusing for me to state in simpler terms, but I hope that makes sense.
signature.asc
Description: OpenPGP digital signature
_______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
