[clamav-users] How often can I run cvdupdate?

[Orion Poplawski via clamav-users]

We're starting to run clamav on more local hosts and were starting to see rate limiting messages. So I've setup a local private mirror with cvdupdate in each of our offices. However now I'm starting to see warnings like:

Received signal: wake up
ClamAV update process started at Wed May 25 07:26:29 2022

WARNING: downloadFile: file not found: https://MIRROR/daily-26552.cdiff

daily database available for update (local version: 26551, remote version: 26552) WARNING: downloadPatch: Can't download daily-26552.cdiff from https://MIRROR/daily-26552.cdiff

WARNING: downloadFile: file not found: https://MIRROR/daily-26552.cdiff

WARNING: downloadPatch: Can't download daily-26552.cdiff from https://MIRROR/daily-26552.cdiff

WARNING: downloadFile: file not found: https://MIRROR/daily-26552.cdiff

WARNING: downloadPatch: Can't download daily-26552.cdiff from https://MIRROR/daily-26552.cdiff The database server doesn't have the latest patch for the daily database (version 26552). The server will likely have updated if you check again in a few hours. main.cvd database is up-to-date (version: 62, sigs: 6647427, f-level: 90, builder: sigmgr) bytecode.cvd database is up-to-date (version: 333, sigs: 92, f-level: 63, builder: awillia2)

which then get reported by logwatch.

The mirror updated a bit later:

2022-05-25 08:15:21 AM - INFO:  Downloaded daily-26552.cdiff
2022-05-25 08:16:22 AM - INFO:  Downloaded daily.cvd. Version: 26552



--
Orion Poplawski
he/him/his  - surely the least important thing about me
IT Systems Manager                         720-772-5637
NWRA, Boulder/CoRA Office             FAX: 303-415-9702
3380 Mitchell Lane                       or...@nwra.com
Boulder, CO 80301                 https://www.nwra.com/

I'm running cvdupdate at the recommended 4 hour interval. Can I run it more often? Although I suppose there always may be an interval between when a client might see the new version and the mirror downloads it, so I may just have to exclude these types of warnings from logwatch.

smime.p7s
Description: S/MIME Cryptographic Signature

_______________________________________________

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/Cisco-Talos/clamav-documentation

https://docs.clamav.net/#mailing-lists-and-chat