As someone else pointed out, it looks like your Ubuntu AppArmor is denying the process from running properly:
https://wiki.ubuntu.com/AppArmor https://help.ubuntu.com/lts/serverguide/apparmor.html https://help.ubuntu.com/community/AppArmor That's your #1 problem... As Mr. Haywood pointed out, there was that dropped packet going to a Cloudflare IP, which is what the ClamAV files are served from. However, it was only an "ACK FIN" packet, so it might be related more to the AppArmor issue, but still worth keeping an eye on when trying to eliminate possibilities. _______________________________________________ clamav-users mailing list clamav-users@lists.clamav.net https://lists.clamav.net/mailman/listinfo/clamav-users Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml