Hi

Many thanks

Please see a snapshot of the debug freshclam log

I think this is the issue but uid/gid is correct for 244 and has full
rewrite on folders

Can't create new file
/var/clamav/tmp/clamav-61f7880d2549a998be74b30d38fe6fc5.tmp in /var/clamav
Hint: The database directory must be writable for UID 244 or GID 244

As I said, if you stop and start freshclam or touch .cvd files it updates
for around a week and then same issue appears again

I do not think it is a time out issue and these servers are situated in a
datacentre on 1 GB link to internet and the default time values would be
used as they are hashed out

I am sorry if I am wrong

Many thanks

John

folder perms

drwxr-xr-x.   3 clamav   clamav    4096 Jan 23 15:16 clamav
-rw-r--r-- 1 clamav clamav    296388 Nov 21 12:51 bytecode.cvd
-rw-r--r-- 1 clamav clamav  58022101 Jan 23 15:15 daily.cvd
-rw-r--r-- 1 clamav clamav 117859675 Nov 26 07:38 main.cvd
drwxr-xr-x 2 clamav clamav      4096 Jan 23 15:16 tmp

grep -i timeout /etc/freshclam.conf
# Timeout in seconds when connecting to database server.
#ConnectTimeout 60
# Timeout in seconds when reading from database server.
#ReceiveTimeout 300


Freshclam running normally

wake up
ClamAV update process started at Mon Jan 20 07:21:30 2020
WARNING: Your ClamAV installation is OUTDATED!
WARNING: Local version: 0.102.0 Recommended version: 0.102.1
DON'T PANIC! Read https://www.clamav.net/documents/upgrading-clamav
daily.cvd database is up to date (version: 25700, sigs: 2148000, f-level:
63, builder: raynman)
main.cvd database is up to date (version: 59, sigs: 4564902, f-level: 60,
builder: sigmgr)
bytecode.cvd database is up to date (version: 331, sigs: 94, f-level: 63,
builder: anvilleg)
--------------------------------------
Received signal: wake up
ClamAV update process started at Mon Jan 20 09:21:30 2020
WARNING: Your ClamAV installation is OUTDATED!
WARNING: Local version: 0.102.0 Recommended version: 0.102.1
DON'T PANIC! Read https://www.clamav.net/documents/upgrading-clamav
daily.cvd database is up to date (version: 25700, sigs: 2148000, f-level:
63, builder: raynman)
main.cvd database is up to date (version: 59, sigs: 4564902, f-level: 60,
builder: sigmgr)
bytecode.cvd database is up to date (version: 331, sigs: 94, f-level: 63,
builder: anvilleg)
--------------------------------------


freshclam debug error

Received signal: wake up
ClamAV update process started at Mon Jan 20 11:21:30 2020
WARNING: Your ClamAV installation is OUTDATED!
WARNING: Local version: 0.102.0 Recommended version: 0.102.1
DON'T PANIC! Read https://www.clamav.net/documents/upgrading-clamav
daily.cvd database is up to date (version: 25700, sigs: 2148000, f-level:
63, builder: raynman)
main.cvd database is up to date (version: 59, sigs: 4564902, f-level: 60,
builder: sigmgr)
bytecode.cvd database is up to date (version: 331, sigs: 94, f-level: 63,
builder: anvilleg)
--------------------------------------
Received signal: wake up
ClamAV update process started at Mon Jan 20 13:21:30 2020
WARNING: Your ClamAV installation is OUTDATED!
WARNING: Local version: 0.102.0 Recommended version: 0.102.1
DON'T PANIC! Read https://www.clamav.net/documents/upgrading-clamav
daily database available for update (local version: 25700, remote version:
25701)
ERROR: downloadFile: Can't create new file
/var/clamav/tmp/clamav-0636ba9bf0c524ebd0f0af59117dabf9.tmp in /var/clamav
Hint: The database directory must be writable for UID 244 or GID 244
WARNING: getcvd: Can't download daily.cvd from
https://database.clamav.net/daily.cvd
ERROR: Unexpected error when attempting to update database: daily
WARNING: fc_update_databases: fc_update_database failed: Failed to
read/write file to database directory (10)
ERROR: Database update process failed: Failed to read/write file to database
directory (10)
ERROR: Update failed.
--------------------------------------
Received signal: wake up
ClamAV update process started at Mon Jan 20 15:21:30 2020
WARNING: Your ClamAV installation is OUTDATED!
WARNING: Local version: 0.102.0 Recommended version: 0.102.1
DON'T PANIC! Read https://www.clamav.net/documents/upgrading-clamav
daily database available for update (local version: 25700, remote version:
25701)
ERROR: downloadFile: Can't create new file
/var/clamav/tmp/clamav-61f7880d2549a998be74b30d38fe6fc5.tmp in /var/clamav
Hint: The database directory must be writable for UID 244 or GID 244
WARNING: getcvd: Can't download daily.cvd from
https://database.clamav.net/daily.cvd
ERROR: Unexpected error when attempting to update database: daily
WARNING: fc_update_databases: fc_update_database failed: Failed to
read/write file to database directory (10)
ERROR: Database update process failed: Failed to read/write file to database
directory (10)
ERROR: Update failed

-----Original Message-----
From: clamav-users [mailto:clamav-users-boun...@lists.clamav.net] On Behalf
Of G.W. Haywood via clamav-users
Sent: 24 January 2020 12:20
To: ClamAV users ML
Cc: G.W. Haywood
Subject: Re: [clamav-users] Problem to update virus database

Hi there,

On Fri, 24 Jan 2020, Doc2disk wrote:

> We see this failure to update on both Centros 6 and 7 If you stop and 
> start fresh clam or touch the files, the issue goes away for a few 
> days

I do not understand these symptoms.  What timeouts are you using?
(See below.)

>> On 24 Jan 2020, at 10:55, Matus UHLAR - fantomas <uh...@fantomas.sk>
wrote:
>>> On 24.01.20 11:10, Tomasz Mejer via clamav-users wrote:
>>> I have installed ClamAV on my Ubuntu 16.04 LTS machine. I can't 
>>> update virus database update.
>>> When I run:
>>> 
>>> sudo freshclam
>> 
>> you should not run freshclam under root user.

Best to create a separate user such as 'clamav' for this stuff.

>>> i got:
>>> "Download failed (28)
>>> "getcvd: Can't download daily.cvd from 
>>> https://database.clamav.net/daily.cvd

If you enable debug logging you may see more helpful information.
When I see (28) it seems to mean that a timeout has been reached.
Perhaps you can increase the two timeouts in the freshclam daemon
configuration (and I suggest that you then restart the daemon).

The timeouts provided by default are I believe too short, I use 1800 seconds
and 600 seconds:

root@pi4b302:~# grep -i timeout /etc/mail/clamav/freshclam.conf
ConnectTimeout 600 ReceiveTimeout 1800

(Yes, this is ClamAV running on a Raspberry Pi4B. :)

>> try running 'https://database.clamav.net/daily.cvd' in /tmp

I think that should read something like

"try running 'wget https://database.clamav.net/daily.cvd'"

HTH

-- 

73,
Ged.

_______________________________________________

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml



The content of this email are intended for the named addressee only. It 
contains information that may be confidential and which may also be privileged. 
Unless you are the named addressee (or authorised to received for the 
addressee) you may not copy or use it, or disclose it to anyone else. If you 
received it in error please notify us immediately and then destroy it. Further, 
we make every effort to keep our network free from viruses, and all email 
passes through full antivirus, content and spam filters. However, you do need 
to scan this email and any attachments to it for viruses as we can take no 
responsibility for any computer virus, which might be transferred by way of 
this email.
 
This email has been sent using DEMS, if you would like to start using DEMS, 
please email Doc2disk Ltd for prices (sa...@doc2disk.com). 



_______________________________________________

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Reply via email to