Yes, there were no new temp dirs left after the successful run. I'm
wondering if it's a time of day network issue, or perhaps a mirror? I've
seen some complaints about a mirror IP that is also in our logs. Don't know.

David

On Tue, Jun 20, 2017 at 6:25 PM, Steven Morgan <smor...@sourcefire.com>
wrote:

> David,
>
> Thanks, so when you say freshclam "completed successfully" you mean there
> were no temp files left?
>
> Steve
>
> On Tue, Jun 20, 2017 at 11:21 AM, David Pullman <david.pull...@gmail.com>
> wrote:
>
> > Steve,
> >
> > Yes, we run freshclam and then clamscan once each day at 00:03 UTC. There
> > were many days of tmp directories. We ran the freshclam utility by hand
> > yesterday, on the instance the logs are from, at about 22:00 UTC, and it
> > completed the download. The subsequent update at 00:03 this morning
> > completed successfully as well.
> >
> > The version is the package install on Ubuntu of clamav and
> > clamav-freshclam: 0.99.2+addedllvm-0ubuntu0.14.04.1.
> >
> > Thanks!
> >
> > David
> >
> > On Tue, Jun 20, 2017 at 11:03 AM, Steven Morgan <smor...@sourcefire.com>
> > wrote:
> >
> > > David,
> > >
> > > So freshclam runs every day at ~00:03:00, and to confirm, the temp
> > > directories/files are left for each of these runs?
> > >
> > > Which version of ClamAV are you using?
> > >
> > > Steve
> > >
> > > On Tue, Jun 20, 2017 at 7:51 AM, David Pullman <
> david.pull...@gmail.com>
> > > wrote:
> > >
> > > > Hi Steve,
> > > >
> > > > I've gathered some logs from one of the servers that had a bunch of
> the
> > > > clamor-nnnnnnnnnn.tmp directories over a number of days. I've
> > aggregated
> > > > seven days of them below (we rotate the log daily). We run freshclam
> > from
> > > > cron each day.
> > > >
> > > > Please let me know if there's any suggestion on how I can get a
> > > definitive
> > > > reason for this, or correcting this? We have two issues, one is of
> > course
> > > > that the sigs are not updated, but also on some of the smaller
> > instances
> > > > the disk space is affected by the tmp files left in /var/lib/clamav.
> > > >
> > > > Thanks very much for any suggestions or help!
> > > >
> > > > Tue Jun 13 00:03:01 2017 -> --------------------------------------
> > > > Tue Jun 13 00:03:01 2017 -> ClamAV update process started at Tue Jun
> 13
> > > > 00:03:01 2017
> > > > Tue Jun 13 00:03:01 2017 -> main.cld is up to date (version: 58,
> sigs:
> > > > 4566249, f-level: 60, builder: sigmgr)
> > > > Tue Jun 13 00:03:09 2017 -> Downloading daily-23452.cdiff [100%]
> > > > Tue Jun 13 00:03:10 2017 -> Downloading daily-23453.cdiff [100%]
> > > > Tue Jun 13 00:03:13 2017 -> Downloading daily-23454.cdiff [100%]
> > > > Wed Jun 14 00:03:02 2017 -> --------------------------------------
> > > > Wed Jun 14 00:03:02 2017 -> ClamAV update process started at Wed Jun
> 14
> > > > 00:03:02 2017
> > > > Wed Jun 14 00:03:02 2017 -> main.cld is up to date (version: 58,
> sigs:
> > > > 4566249, f-level: 60, builder: sigmgr)
> > > > Wed Jun 14 00:03:38 2017 -> nonblock_connect: connect timing out (30
> > > secs)
> > > >
> > > >
> > > _______________________________________________
> > > clamav-users mailing list
> > > clamav-users@lists.clamav.net
> > > http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
> > >
> > >
> > > Help us build a comprehensive ClamAV guide:
> > > https://github.com/vrtadmin/clamav-faq
> > >
> > > http://www.clamav.net/contact.html#ml
> > >
> > _______________________________________________
> > clamav-users mailing list
> > clamav-users@lists.clamav.net
> > http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
> >
> >
> > Help us build a comprehensive ClamAV guide:
> > https://github.com/vrtadmin/clamav-faq
> >
> > http://www.clamav.net/contact.html#ml
> >
> _______________________________________________
> clamav-users mailing list
> clamav-users@lists.clamav.net
> http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
>
>
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
>
> http://www.clamav.net/contact.html#ml
>
_______________________________________________
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Reply via email to