Steve,

Yes, we run freshclam and then clamscan once each day at 00:03 UTC. There
were many days of tmp directories. We ran the freshclam utility by hand
yesterday, on the instance the logs are from, at about 22:00 UTC, and it
completed the download. The subsequent update at 00:03 this morning
completed successfully as well.

The version is the package install on Ubuntu of clamav and
clamav-freshclam: 0.99.2+addedllvm-0ubuntu0.14.04.1.

Thanks!

David

On Tue, Jun 20, 2017 at 11:03 AM, Steven Morgan <smor...@sourcefire.com>
wrote:

> David,
>
> So freshclam runs every day at ~00:03:00, and to confirm, the temp
> directories/files are left for each of these runs?
>
> Which version of ClamAV are you using?
>
> Steve
>
> On Tue, Jun 20, 2017 at 7:51 AM, David Pullman <david.pull...@gmail.com>
> wrote:
>
> > Hi Steve,
> >
> > I've gathered some logs from one of the servers that had a bunch of the
> > clamor-nnnnnnnnnn.tmp directories over a number of days. I've aggregated
> > seven days of them below (we rotate the log daily). We run freshclam from
> > cron each day.
> >
> > Please let me know if there's any suggestion on how I can get a
> definitive
> > reason for this, or correcting this? We have two issues, one is of course
> > that the sigs are not updated, but also on some of the smaller instances
> > the disk space is affected by the tmp files left in /var/lib/clamav.
> >
> > Thanks very much for any suggestions or help!
> >
> > Tue Jun 13 00:03:01 2017 -> --------------------------------------
> > Tue Jun 13 00:03:01 2017 -> ClamAV update process started at Tue Jun 13
> > 00:03:01 2017
> > Tue Jun 13 00:03:01 2017 -> main.cld is up to date (version: 58, sigs:
> > 4566249, f-level: 60, builder: sigmgr)
> > Tue Jun 13 00:03:09 2017 -> Downloading daily-23452.cdiff [100%]
> > Tue Jun 13 00:03:10 2017 -> Downloading daily-23453.cdiff [100%]
> > Tue Jun 13 00:03:13 2017 -> Downloading daily-23454.cdiff [100%]
> > Wed Jun 14 00:03:02 2017 -> --------------------------------------
> > Wed Jun 14 00:03:02 2017 -> ClamAV update process started at Wed Jun 14
> > 00:03:02 2017
> > Wed Jun 14 00:03:02 2017 -> main.cld is up to date (version: 58, sigs:
> > 4566249, f-level: 60, builder: sigmgr)
> > Wed Jun 14 00:03:38 2017 -> nonblock_connect: connect timing out (30
> secs)
> >
> >
> _______________________________________________
> clamav-users mailing list
> clamav-users@lists.clamav.net
> http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
>
>
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
>
> http://www.clamav.net/contact.html#ml
>
_______________________________________________
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Reply via email to