Steve, Yes, we run freshclam and then clamscan once each day at 00:03 UTC. There were many days of tmp directories. We ran the freshclam utility by hand yesterday, on the instance the logs are from, at about 22:00 UTC, and it completed the download. The subsequent update at 00:03 this morning completed successfully as well.
The version is the package install on Ubuntu of clamav and clamav-freshclam: 0.99.2+addedllvm-0ubuntu0.14.04.1. Thanks! David On Tue, Jun 20, 2017 at 11:03 AM, Steven Morgan <smor...@sourcefire.com> wrote: > David, > > So freshclam runs every day at ~00:03:00, and to confirm, the temp > directories/files are left for each of these runs? > > Which version of ClamAV are you using? > > Steve > > On Tue, Jun 20, 2017 at 7:51 AM, David Pullman <david.pull...@gmail.com> > wrote: > > > Hi Steve, > > > > I've gathered some logs from one of the servers that had a bunch of the > > clamor-nnnnnnnnnn.tmp directories over a number of days. I've aggregated > > seven days of them below (we rotate the log daily). We run freshclam from > > cron each day. > > > > Please let me know if there's any suggestion on how I can get a > definitive > > reason for this, or correcting this? We have two issues, one is of course > > that the sigs are not updated, but also on some of the smaller instances > > the disk space is affected by the tmp files left in /var/lib/clamav. > > > > Thanks very much for any suggestions or help! > > > > Tue Jun 13 00:03:01 2017 -> -------------------------------------- > > Tue Jun 13 00:03:01 2017 -> ClamAV update process started at Tue Jun 13 > > 00:03:01 2017 > > Tue Jun 13 00:03:01 2017 -> main.cld is up to date (version: 58, sigs: > > 4566249, f-level: 60, builder: sigmgr) > > Tue Jun 13 00:03:09 2017 -> Downloading daily-23452.cdiff [100%] > > Tue Jun 13 00:03:10 2017 -> Downloading daily-23453.cdiff [100%] > > Tue Jun 13 00:03:13 2017 -> Downloading daily-23454.cdiff [100%] > > Wed Jun 14 00:03:02 2017 -> -------------------------------------- > > Wed Jun 14 00:03:02 2017 -> ClamAV update process started at Wed Jun 14 > > 00:03:02 2017 > > Wed Jun 14 00:03:02 2017 -> main.cld is up to date (version: 58, sigs: > > 4566249, f-level: 60, builder: sigmgr) > > Wed Jun 14 00:03:38 2017 -> nonblock_connect: connect timing out (30 > secs) > > > > > _______________________________________________ > clamav-users mailing list > clamav-users@lists.clamav.net > http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users > > > Help us build a comprehensive ClamAV guide: > https://github.com/vrtadmin/clamav-faq > > http://www.clamav.net/contact.html#ml > _______________________________________________ clamav-users mailing list clamav-users@lists.clamav.net http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml