Re: [Clamav-users] ClamAV crash - too many signatures?

On Thu, 21 Feb 2008 15:47:39 -0800 (PST) "Jose Alf." <[EMAIL PROTECTED]> wrote: > My clamd daemon died today. The log shows the following (see > below). The interesting message is > Thu Feb 21 10:33:18 2008 -> ERROR: reload db failed: Malformed > database > > Also interesting is the number

Re: [Clamav-users] ClamAV crash - too many signatures?

On 22 Feb 2008 at 7:16, Gerard wrote: > clamd reports: 249417 > freshclam reports: 169676 That's main only. daily is 48000 now, giving freshclam total about 218000. With just Sanesesecurity the total is 232000 and not caused me any issues on 4 servers. The difference with your total m

Re: [Clamav-users] ClamAV crash - too many signatures?

On Fri, 22 Feb 2008 12:57:05 - "Paul Whelan" <[EMAIL PROTECTED]> wrote: > The difference with your total must be other sigs - do you use MSRBL ? Yes -- Gerard [EMAIL PROTECTED] Fortune favors the lucky. signature.asc Description: PGP signature

Re: [Clamav-users] ClamAV crash - too many signatures?

Paul Whelan <[EMAIL PROTECTED]> wrote: > That's main only. daily is 48000 now, giving freshclam total about 218000. > The difference with your total must be other sigs - do you use MSRBL ? Yes Paul. I am using MSRBL, but I don't think that will increase the number that much. I am att

Re: [Clamav-users] Why load virus database and scan cost so much processor ability?

David Liang wrote: > drwxr-xr-x 2 clamav clamav4096 Feb 22 07:39 daily.inc > drwxr-xr-x 2 clamav clamav4096 Feb 22 07:34 main.inc > -rw--- 1 clamav clamav 260 Feb 22 07:38 mirrors.dat Shut down clamd. Keep these directories and file and delete the rest. Restart clamd. dp ___

Re: [Clamav-users] Why load virus database and scan cost so much processor ability?

Le vendredi 22 février 2008 00:58, David Liang a écrit : > Thu Feb 21 15:35:30 2008 -> clamd daemon 0.90.1 (OS: linux-gnu, ARCH: > i386, CPU: i486) Last Clamav version is 0.92.1. You should keep your Clamav package up-to-date. -- Cordialement / Best regards, Arnaud Jacques Consultant Sécurité

Re: [Clamav-users] ClamAV crash - too many signatures?

Le vendredi 22 février 2008 16:07, Jose Alf. a écrit : > I am attaching the /var/lib/clamav directory list. Please > take a look and tell me if there something obvious that I am missing. You have main.cvd and main.inc directory at the same place. Delete main.cvd. -- Cordialement / Best regards,

Re: [Clamav-users] Why load virus database and scan cost so much processor ability?

[EMAIL PROTECTED]:~$ ls -lR /var/lib/clamav /var/lib/clamav: total 13040 drwxr-xr-x 2 clamav clamav4096 Aug 1 2007 clamav-3d5c333808b1d1d7e983fa988790288f -rw-r--r-- 1 clamav clamav 297958 Jun 28 2006 clamav-538867c134801972 -rw-r--r-- 1 clamav clamav 2113828 Nov 3 2006 clamav-a54115fb220

Re: [Clamav-users] False positive Phishing.Heuristics.Email.SpoofedDomain

On Thu, Feb 21, 2008 at 07:49:27PM -0300, Manuel Lemos wrote: > I have site that once in a while sends e-mail alerts about new book > reviews published in the site. > > Recently I noticed that some Dutch e-mail servers were rejecting the > review alert messages because the site IP address was list

Re: [Clamav-users] ClamAV crash - too many signatures?

Yep. removing the main.cvd file solved the issue. No I get 237333 signatures loaded. Thanks! Dennis Peterson <[EMAIL PROTECTED]> wrote: I wonder if it's still the case that when you have both the cvd files and the inc directories that clamd loads all copies, thereby doubling the number o

Re: [Clamav-users] ClamAV crash - too many signatures?

Jose Alf. wrote: > Paul Whelan <[EMAIL PROTECTED]> wrote: > >> That's main only. daily is 48000 now, giving freshclam total about >> 218000. > >> The difference with your total must be other sigs - do you use >> MSRBL ? > > > Yes Paul. I am using MSRBL, but I don't think that will increase the

Re: [Clamav-users] Why load virus database and scan cost so much processor ability?

Arnaud Jacques wrote: > Le vendredi 22 février 2008 00:58, David Liang a écrit : > >> Thu Feb 21 15:35:30 2008 -> clamd daemon 0.90.1 (OS: linux-gnu, ARCH: >> i386, CPU: i486) > > Last Clamav version is 0.92.1. You should keep your Clamav package up-to-date. > More specifically, slow loading is

Re: [Clamav-users] Why load virus database and scan cost so much processor ability?

Noel Jones wrote: > Arnaud Jacques wrote: >> Le vendredi 22 février 2008 00:58, David Liang a écrit : >> >>> Thu Feb 21 15:35:30 2008 -> clamd daemon 0.90.1 (OS: linux-gnu, ARCH: >>> i386, CPU: i486) >> Last Clamav version is 0.92.1. You should keep your Clamav package >> up-to-date. >> > > More

Re: [Clamav-users] Why load virus database and scan cost so much processor ability?

hi, dp Do you mean there are multiple virus databases on my server? For the clamav was installed by other people, so I didn't notice it. Is it OK to delete other virus database just leave daily.inc and main.inc? Thanks > Noel Jones wrote: >> Arnaud Jacques wrote: >>> Le vendredi 22 février

Re: [Clamav-users] Why load virus database and scan cost so much processor ability?

David Liang wrote: > hi, dp > Do you mean there are multiple virus databases on my server? For the > clamav was installed by other people, so I didn't notice it. Is it OK > to delete other virus database just leave daily.inc and main.inc? > Thanks > Yes - you have both inc and cvd version