Hello,
it "should"?
Sometimes the CDN delivers an older definition as advertised and then you get
cld and not cvd.
Unfortunaly clamav can't do something in this case.
Please read "The Magic behind cvd's, cld's and cdiff's":
https://blog.clamav.net/2021/03/clamav-cvds-cdiffs-and-magic-behind.html
But you are right, clamav should normally detect the signatures as out-dated.
kind greetings
newcomer01
Von / From: Clamav User Mailinglist <mailto:clamav-users@lists.clamav.net>
An / To: Newcomer01 <mailto:newcome...@posteo.de>
CC / CC: Masaru Nomiya <mailto:nom...@lake.dti.ne.jp>
Gesendet / Sent: Samstag, März 16, 2024 um 12:04 (at 12:04 PM) +0100
Betreff / Subject: Re: [clamav-users] 100% CPU usage in clamd
Hello,
Sorry for late reply.
In the Message;
Subject : Re: [clamav-users] 100% CPU usage in clamd
Message-ID :
<CACRqGtb=+O8VHzOXC-LJk0h+Z2gZHeUdti9=E=58b0q1tys...@mail.gmail.com>
Date & Time: Fri, 15 Mar 2024 23:55:13 +0900
[TI] == Taizo ITO via clamav-users <clamav-users@lists.clamav.net> has written:
TI> Hello,
TI> Thank you for the reply.
TI> Clamd version is, v1.3.0 but the issue also happened in v1.2.1.
TI> My first question might have been wrong because the problem happened
TI> with the latest virus database "Version: 27215" as well.
TI> I'm using "clamdscan" to scan a file. Scanning 3 files in parallel
TI> caused almost 300% in CPU workload.
[...]
The daily.cvd is out of date, should be daily.cld now?
When you run freshclam, doesn't it say it's out of date?
Here is mine as of 1.3.0;
-rw-r--r-- 1 vscan vscan 1411072 2月 28 06:28 bytecode.cld
-rw-r--r-- 1 vscan vscan 199960064 3月 16 18:00 daily.cld
-rw-r--r-- 1 vscan vscan 69 5月 5 2022 freshclam.dat
-rw-r--r-- 1 vscan vscan 170479789 5月 5 2022 main.cvd
drwx------ 1 vscan vscan 192 7月 18 2022 tmp.ce63819e4
and,
# sigtool -i /var/lib/clamav/daily.cld
File: daily.cld
Build time: 16 Mar 2024 04:30 -0400
Version: 27216
Signatures: 2055383
Functionality level: 90
Builder: raynman
Verification OK.
Best Regards.
---
┏━━┓彡 野宮 賢 mail-to: nomiya @ lake.dti.ne.jp
┃＼／彡
┗━━┛ "Companies have come to view generative AI as a kind of monster that
must be fed at all costs―even if it isn’t always clear what exactly
that data is needed for or what those future AI systems might end up
doing."
-- Generative AI Is Making Companies Even More Thirsty for Your Data --
_______________________________________________
Manage your clamav-users mailing list subscription / unsubscribe:
https://lists.clamav.net/mailman/listinfo/clamav-users
Help us build a comprehensive ClamAV guide:
https://github.com/Cisco-Talos/clamav-documentation
https://docs.clamav.net/#mailing-lists-and-chat
_______________________________________________
Manage your clamav-users mailing list subscription / unsubscribe:
https://lists.clamav.net/mailman/listinfo/clamav-users
Help us build a comprehensive ClamAV guide:
https://github.com/Cisco-Talos/clamav-documentation
https://docs.clamav.net/#mailing-lists-and-chat
