Hi Many thanks
Please see a snapshot of the debug freshclam log I think this is the issue but uid/gid is correct for 244 and has full rewrite on folders Can't create new file /var/clamav/tmp/clamav-61f7880d2549a998be74b30d38fe6fc5.tmp in /var/clamav Hint: The database directory must be writable for UID 244 or GID 244 As I said, if you stop and start freshclam or touch .cvd files it updates for around a week and then same issue appears again I do not think it is a time out issue and these servers are situated in a datacentre on 1 GB link to internet and the default time values would be used as they are hashed out I am sorry if I am wrong Many thanks John folder perms drwxr-xr-x. 3 clamav clamav 4096 Jan 23 15:16 clamav -rw-r--r-- 1 clamav clamav 296388 Nov 21 12:51 bytecode.cvd -rw-r--r-- 1 clamav clamav 58022101 Jan 23 15:15 daily.cvd -rw-r--r-- 1 clamav clamav 117859675 Nov 26 07:38 main.cvd drwxr-xr-x 2 clamav clamav 4096 Jan 23 15:16 tmp grep -i timeout /etc/freshclam.conf # Timeout in seconds when connecting to database server. #ConnectTimeout 60 # Timeout in seconds when reading from database server. #ReceiveTimeout 300 Freshclam running normally wake up ClamAV update process started at Mon Jan 20 07:21:30 2020 WARNING: Your ClamAV installation is OUTDATED! WARNING: Local version: 0.102.0 Recommended version: 0.102.1 DON'T PANIC! Read https://www.clamav.net/documents/upgrading-clamav daily.cvd database is up to date (version: 25700, sigs: 2148000, f-level: 63, builder: raynman) main.cvd database is up to date (version: 59, sigs: 4564902, f-level: 60, builder: sigmgr) bytecode.cvd database is up to date (version: 331, sigs: 94, f-level: 63, builder: anvilleg) -------------------------------------- Received signal: wake up ClamAV update process started at Mon Jan 20 09:21:30 2020 WARNING: Your ClamAV installation is OUTDATED! WARNING: Local version: 0.102.0 Recommended version: 0.102.1 DON'T PANIC! Read https://www.clamav.net/documents/upgrading-clamav daily.cvd database is up to date (version: 25700, sigs: 2148000, f-level: 63, builder: raynman) main.cvd database is up to date (version: 59, sigs: 4564902, f-level: 60, builder: sigmgr) bytecode.cvd database is up to date (version: 331, sigs: 94, f-level: 63, builder: anvilleg) -------------------------------------- freshclam debug error Received signal: wake up ClamAV update process started at Mon Jan 20 11:21:30 2020 WARNING: Your ClamAV installation is OUTDATED! WARNING: Local version: 0.102.0 Recommended version: 0.102.1 DON'T PANIC! Read https://www.clamav.net/documents/upgrading-clamav daily.cvd database is up to date (version: 25700, sigs: 2148000, f-level: 63, builder: raynman) main.cvd database is up to date (version: 59, sigs: 4564902, f-level: 60, builder: sigmgr) bytecode.cvd database is up to date (version: 331, sigs: 94, f-level: 63, builder: anvilleg) -------------------------------------- Received signal: wake up ClamAV update process started at Mon Jan 20 13:21:30 2020 WARNING: Your ClamAV installation is OUTDATED! WARNING: Local version: 0.102.0 Recommended version: 0.102.1 DON'T PANIC! Read https://www.clamav.net/documents/upgrading-clamav daily database available for update (local version: 25700, remote version: 25701) ERROR: downloadFile: Can't create new file /var/clamav/tmp/clamav-0636ba9bf0c524ebd0f0af59117dabf9.tmp in /var/clamav Hint: The database directory must be writable for UID 244 or GID 244 WARNING: getcvd: Can't download daily.cvd from https://database.clamav.net/daily.cvd ERROR: Unexpected error when attempting to update database: daily WARNING: fc_update_databases: fc_update_database failed: Failed to read/write file to database directory (10) ERROR: Database update process failed: Failed to read/write file to database directory (10) ERROR: Update failed. -------------------------------------- Received signal: wake up ClamAV update process started at Mon Jan 20 15:21:30 2020 WARNING: Your ClamAV installation is OUTDATED! WARNING: Local version: 0.102.0 Recommended version: 0.102.1 DON'T PANIC! Read https://www.clamav.net/documents/upgrading-clamav daily database available for update (local version: 25700, remote version: 25701) ERROR: downloadFile: Can't create new file /var/clamav/tmp/clamav-61f7880d2549a998be74b30d38fe6fc5.tmp in /var/clamav Hint: The database directory must be writable for UID 244 or GID 244 WARNING: getcvd: Can't download daily.cvd from https://database.clamav.net/daily.cvd ERROR: Unexpected error when attempting to update database: daily WARNING: fc_update_databases: fc_update_database failed: Failed to read/write file to database directory (10) ERROR: Database update process failed: Failed to read/write file to database directory (10) ERROR: Update failed -----Original Message----- From: clamav-users [mailto:clamav-users-boun...@lists.clamav.net] On Behalf Of G.W. Haywood via clamav-users Sent: 24 January 2020 12:20 To: ClamAV users ML Cc: G.W. Haywood Subject: Re: [clamav-users] Problem to update virus database Hi there, On Fri, 24 Jan 2020, Doc2disk wrote: > We see this failure to update on both Centros 6 and 7 If you stop and > start fresh clam or touch the files, the issue goes away for a few > days I do not understand these symptoms. What timeouts are you using? (See below.) >> On 24 Jan 2020, at 10:55, Matus UHLAR - fantomas <uh...@fantomas.sk> wrote: >>> On 24.01.20 11:10, Tomasz Mejer via clamav-users wrote: >>> I have installed ClamAV on my Ubuntu 16.04 LTS machine. I can't >>> update virus database update. >>> When I run: >>> >>> sudo freshclam >> >> you should not run freshclam under root user. Best to create a separate user such as 'clamav' for this stuff. >>> i got: >>> "Download failed (28) >>> "getcvd: Can't download daily.cvd from >>> https://database.clamav.net/daily.cvd If you enable debug logging you may see more helpful information. When I see (28) it seems to mean that a timeout has been reached. Perhaps you can increase the two timeouts in the freshclam daemon configuration (and I suggest that you then restart the daemon). The timeouts provided by default are I believe too short, I use 1800 seconds and 600 seconds: root@pi4b302:~# grep -i timeout /etc/mail/clamav/freshclam.conf ConnectTimeout 600 ReceiveTimeout 1800 (Yes, this is ClamAV running on a Raspberry Pi4B. :) >> try running 'https://database.clamav.net/daily.cvd' in /tmp I think that should read something like "try running 'wget https://database.clamav.net/daily.cvd'" HTH -- 73, Ged. _______________________________________________ clamav-users mailing list clamav-users@lists.clamav.net https://lists.clamav.net/mailman/listinfo/clamav-users Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml The content of this email are intended for the named addressee only. It contains information that may be confidential and which may also be privileged. Unless you are the named addressee (or authorised to received for the addressee) you may not copy or use it, or disclose it to anyone else. If you received it in error please notify us immediately and then destroy it. Further, we make every effort to keep our network free from viruses, and all email passes through full antivirus, content and spam filters. However, you do need to scan this email and any attachments to it for viruses as we can take no responsibility for any computer virus, which might be transferred by way of this email. This email has been sent using DEMS, if you would like to start using DEMS, please email Doc2disk Ltd for prices (sa...@doc2disk.com). _______________________________________________ clamav-users mailing list clamav-users@lists.clamav.net https://lists.clamav.net/mailman/listinfo/clamav-users Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml