On Tue, Aug 7, 2012 at 3:49 PM, Stefano Tiberi <
s.tib...@traitorrforwarding.com> wrote:

> I don't know where is the problem, I see there are a lot of sub-directories
> like these:
>
> clamav-52fdc32f7bca6eb1f11f81240d68e24a
> clamav-a89967f4619ac472cd996c667d22cf7e
> clamav-fe1c0991a6dd48d381c5fa00f7e65307
> clamav-531a3e848e1537d6774d85d2050b2007
> clamav-a8bc0e0240f16e59a161af4e59fbd789
> clamav-fe2b4bbeb681f6d47406e1065e1d6020
> clamav-5322d10488992f0496f1684b8a4db488
> clamav-a8d92eb4459602199805b070c91bba78
> clamav-fe39a361be145415e57313c9431bdf68
> clamav-532879a88ebeec52821bf07f8928d37e
> clamav-a8e1cc08547b3151eff493d9dfdce851
> clamav-fe46e8bc29663b7752213bd9a09dcbe0
> clamav-532d26fe4ee0b22401f166273fb6cc31
> clamav-a8e1ee0352cd886bab538715a5cd11cd
> clamav-fe5d1b136ee8c9d62625237ea288b07c
> clamav-5335e964e9be230731dc9c36c04d1ad9
> clamav-a8e3fd96bbb7175c7ce41fbe0bdda777
> clamav-fe5e9ee283429de737b94646102103e2
> clamav-533adf9108d973252cc3bc10ff2aae7a
> clamav-a8e9c5241058a385bb8b34aebcd43d23
> clamav-fe67400754b22f270fcfb7142e504998
> clamav-534b0293e958e5429b39f5f8f85680f9
> clamav-a8eac801a2b97e1635984e4cc017567c
> clamav-fe68593c9aafd617e91ed29d4483dad7
>
> And in some of these directories there are daily.mdb files of these
> dimension
>
> 4407820 15640 -rw-r--r--   1 clamav   clamav   15994685 Dec 12  2010
> ./clamav-df4f970d917c71d9aa69c7932515ceaa/main.ndb
>  90713 13104 -rw-r--r--   1 clamav   clamav   13395091 Jul 29 09:17
> ./clamav-75dae566b2b795a61aa2d7ba2281f988/daily.mdb
> 827590 13104 -rw-r--r--   1 clamav   clamav   13395091 Jul 30 14:17
> ./clamav-2b49a030eb9e1d604de8303605e0075f/daily.mdb
>  81953 13104 -rw-r--r--   1 clamav   clamav   13395091 Jul 29 08:17
> ./clamav-3fb3f871da5f1856bb5ccd2e1575a7f5/daily.mdb
> 761872 13104 -rw-r--r--   1 clamav   clamav   13395091 Jul 30 03:17
> ./clamav-709e6d91edc309dda2acd25ab7ad0de8/daily.mdb
>  73865 13104 -rw-r--r--   1 clamav   clamav   13395091 Jul 29 07:17
> ./clamav-9faf4cbae3cccb3c3e89ce0a64a47cd7/daily.mdb
> 737290 13104 -rw-r--r--   1 clamav   clamav   13395091 Jul 30 00:17
> ./clamav-5805d6b5b02c46a93b064655991d012b/daily.mdb
> 729960 13104 -rw-r--r--   1 clamav   clamav   13395091 Jul 29 23:17
> ./clamav-1507458291e073f8153a4569e2887d82/daily.mdb
> 720948 13104 -rw-r--r--   1 clamav   clamav   13395091 Jul 30 12:17
> ./clamav-545fead305b44bc449b74d38c94e38a7/daily.mdb
> 712771 13104 -rw-r--r--   1 clamav   clamav   13395091 Jul 29 21:17
> ./clamav-2d2768d36cdde169b138ea3e14d3a2ab/daily.mdb
>  65799 13104 -rw-r--r--   1 clamav   clamav   13395091 Jul 31 05:17
> ./clamav-490478c53538ce6bf8663e08714f125d/daily.mdb
>  65778 13104 -rw-r--r--   1 clamav   clamav   13395091 Jul 29 06:17
> ./clamav-1f662afb126bbed866dce66faf8dc873/daily.mdb
> 630798 13104 -rw-r--r--   1 clamav   clamav   13395091 Jul 29 11:17
> ./clamav-9abfbde48fbbe03bdacf2ec1b29bdddd/daily.mdb
> 622619 13104 -rw-r--r--   1 clamav   clamav   13395091 Jul 29 10:17
> ./clamav-6ba63744ad8a156a7de15e1536a27136/daily.mdb
> 622596 13104 -rw-r--r--   1 clamav   clamav   13395091 Jul 25 02:17
> ./clamav-da7b2c016eda6bd0688c1de26df655e5/daily.mdb
> 581642 13104 -rw-r--r--   1 clamav   clamav   13395091 Jul 29 05:17
> ./clamav-f676985aba07270140bd3b266e910e31/daily.mdb
> 573515 13104 -rw-r--r--   1 clamav   clamav   13395091 Jul 29 04:17
> ./clamav-ac4517d7ddd9ef1998fb204aa15c0e4b/daily.mdb
> 557240 13104 -rw-r--r--   1 clamav   clamav   13395091 Jul 29 22:17
> ./clamav-9cbda86c2415c4b0b0a7dcbd9bcc2ac2/daily.mdb
> 540682 13104 -rw-r--r--   1 clamav   clamav   13395091 Jul 29 00:17
> ./clamav-678f58928d3add05926eaa84acd50519/daily.mdb
> 524299 13104 -rw-r--r--   1 clamav   clamav   13395091 Jul 28 22:17
> ./clamav-e9493418c0f8d8d0f8a209616a8e7a06/daily.mdb
>
> Do you think that i can delete some of these subdirectories (for example
> the
> most old)?
>
>
> _______________________________________________
> Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
> http://www.clamav.net/support/ml
>


It looks like freshclam has been unable to update your signatures. The
latest daily sigs are version 15227, so 15171 is several days behind. It is
growing continuously because freshclam is downloading a new daily file
every hour and trying to update. Then it is failing to apply and the
temporary files are left behind until the next attempt. Check your
freshclam log for details. Something must have happened on July 23rd or
started happening that day that is blocking freshclam from updating.

As for the temp files and folders, remove all the ones that are older than
1 day and have only "daily.mdb" inside. That should give you more space to
fix the real problem, which is whatever is preventing freshclam from
running successfully.

I also recommend upgrading from 0.96 to 0.97 but that is your decision to
make. Doing that at the same time as an Ubuntu upgrade would work, but you
should start planning it now. Ubuntu 8.04 support runs out in less than 1
year.

Hope this helps,

Dave R.

-- 
---
Dave Raynor
Sourcefire Vulnerability Research Team
dray...@sourcefire.com
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Reply via email to