Mailing List Archive: [clamav-users] SelfCheck: Database modification detected. Forcing reload.

[clamav-users] SelfCheck: Database modification detected. Forcing reload.

Nov 13, 2019, 5:24 PM

Post #1 of 5 (480 views)

Hello clamd mailing list,

I recently installed clamav version 0.101.4-1.fc30 on Fedora 30.
A new situation I have never seen has started.
Every day around 5am clamd causes a problem.
I traced it to this in logs:

SelfCheck: Database modification detected. Forcing reload.

I have a daily cron job that runs around 3am that:
- shuts down clamd
- runs freshclam
- starts clamd

I see several of these log entries after the above daily cron between
3am and 5am:
SelfCheck: Database status OK.

So, since the Database is OK 99.9% of the time, why is it suddenly not
OK at 5am?
There are no cron jobs scheduled for 5am.

Thanks in advance

_______________________________________________

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users

Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] SelfCheck: Database modification detected. Forcing reload. [ In reply to ]

clamav-users at lists

Nov 13, 2019, 6:17 PM

Post #2 of 5 (480 views)

Permalink

I have more information.
Turns out there is a cron job I was unaware of.
freshclam-sleep is running every 3 hours.
Apparently, freshclam-sleep does something that freshclam doesn't and
causes a database update.
Do I need to run freshclam and freshclam-sleep?
Can I turn off the freshclam-sleep cron job or should I use
freshclam-sleep instead of freshclam in my daily 3am maintenance script?

On 11/13/2019 7:24 PM, Cliff Hayes via clamav-users wrote:
> Hello clamd mailing list,
>
> I recently installed clamav version 0.101.4-1.fc30 on Fedora 30.
> A new situation I have never seen has started.
> Every day around 5am clamd causes a problem.
> I traced it to this in logs:
>
> SelfCheck: Database modification detected. Forcing reload.
>
> I have a daily cron job that runs around 3am that:
> - shuts down clamd
> - runs freshclam
> - starts clamd
>
> I see several of these log entries after the above daily cron between
> 3am and 5am:
> SelfCheck: Database status OK.
>
> So, since the Database is OK 99.9% of the time, why is it suddenly not
> OK at 5am?
> There are no cron jobs scheduled for 5am.
>
> Thanks in advance
>
>
> _______________________________________________
>
> clamav-users mailing list
> clamav-users@lists.clamav.net
> https://lists.clamav.net/mailman/listinfo/clamav-users
>
>
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
>
> http://www.clamav.net/contact.html#ml
>

_______________________________________________

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users

Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] SelfCheck: Database modification detected. Forcing reload. [ In reply to ]

orion at nwra

Nov 13, 2019, 8:58 PM

Post #3 of 5 (479 views)

Permalink

freshclam-sleep is Fedora's method of automatically updating the
signatures. If you want to update it your way, feel free to disable it.

BTW - you don't need to shutdown clamd to update the signatures.

On 11/13/19 7:17 PM, Cliff Hayes via clamav-users wrote:
> I have more information.
> Turns out there is a cron job I was unaware of.
> freshclam-sleep is running every 3 hours.
> Apparently, freshclam-sleep does something that freshclam doesn't and
> causes a database update.
> Do I need to run freshclam and freshclam-sleep?
> Can I turn off the freshclam-sleep cron job or should I use
> freshclam-sleep instead of freshclam in my daily 3am maintenance script?
>
> On 11/13/2019 7:24 PM, Cliff Hayes via clamav-users wrote:
>> Hello clamd mailing list,
>>
>> I recently installed clamav version 0.101.4-1.fc30 on Fedora 30.
>> A new situation I have never seen has started.
>> Every day around 5am clamd causes a problem.
>> I traced it to this in logs:
>>
>> SelfCheck: Database modification detected. Forcing reload.
>>
>> I have a daily cron job that runs around 3am that:
>> - shuts down clamd
>> - runs freshclam
>> - starts clamd
>>
>> I see several of these log entries after the above daily cron between
>> 3am and 5am:
>> SelfCheck: Database status OK.
>>
>> So, since the Database is OK 99.9% of the time, why is it suddenly not
>> OK at 5am?
>> There are no cron jobs scheduled for 5am.
>>
>> Thanks in advance
>>
>>
>> _______________________________________________
>>
>> clamav-users mailing list
>> clamav-users@lists.clamav.net
>> https://lists.clamav.net/mailman/listinfo/clamav-users
>>
>>
>> Help us build a comprehensive ClamAV guide:
>> https://github.com/vrtadmin/clamav-faq
>>
>> http://www.clamav.net/contact.html#ml
>>
>
> _______________________________________________
>
> clamav-users mailing list
> clamav-users@lists.clamav.net
> https://lists.clamav.net/mailman/listinfo/clamav-users
>
>
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
>
> http://www.clamav.net/contact.html#ml

--
Orion Poplawski
Manager of NWRA Technical Systems 720-772-5637
NWRA, Boulder/CoRA Office FAX: 303-415-9702
3380 Mitchell Lane orion@nwra.com
Boulder, CO 80301 https://www.nwra.com/

Re: [clamav-users] [ext] SelfCheck: Database modification detected. Forcing reload. [ In reply to ]

clamav-users at lists

Nov 13, 2019, 10:40 PM

Post #4 of 5 (479 views)

Permalink

* Cliff Hayes via clamav-users <clamav-users@lists.clamav.net>:

> I have a daily cron job that runs around 3am that:
> - shuts down clamd
> - runs freshclam
> - starts clamd

Why?

freshclam usually runs all the time, updating and signalling clamd on
demand.

But you do have a point...

Ralf Hildebrandt
Charité - Universitätsmedizin Berlin
Geschäftsbereich IT | Abteilung Netzwerk

Campus Benjamin Franklin (CBF)
Haus I | 1. OG | Raum 105
Hindenburgdamm 30 | D-12203 Berlin

Tel. +49 30 450 570 155
ralf.hildebrandt@charite.de
https://www.charite.de

_______________________________________________

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users

Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] SelfCheck: Database modification detected. Forcing reload. [ In reply to ]

uhlar at fantomas

Nov 14, 2019, 12:12 AM

Post #5 of 5 (479 views)

Permalink

On 13.11.19 21:58, Orion Poplawski wrote:
>freshclam-sleep is Fedora's method of automatically updating the
>signatures. If you want to update it your way, feel free to disable
>it.

even something other than standard freshclam daemon does?
Or is it just for case freshclam does not run?

>BTW - you don't need to shutdown clamd to update the signatures.

correct. In fact, developing the same task for something already
implemented may cause problems like this one.

>On 11/13/19 7:17 PM, Cliff Hayes via clamav-users wrote:
>>I have more information.
>>Turns out there is a cron job I was unaware of.
>>freshclam-sleep is running every 3 hours.
>>Apparently, freshclam-sleep does something that freshclam doesn't
>>and causes a database update.
>>Do I need to run freshclam and freshclam-sleep?
>>Can I turn off the freshclam-sleep cron job or should I use
>>freshclam-sleep instead of freshclam in my daily 3am maintenance
>>script?

>>On 11/13/2019 7:24 PM, Cliff Hayes via clamav-users wrote:
>>>I recently installed clamav version 0.101.4-1.fc30 on Fedora 30.
>>>A new situation I have never seen has started.
>>>Every day around 5am clamd causes a problem.
>>>I traced it to this in logs:
>>>
>>>SelfCheck: Database modification detected. Forcing reload.
>>>
>>>I have a daily cron job that runs around 3am that:
>>>- shuts down clamd
>>>- runs freshclam
>>>- starts clamd
>>>
>>>I see several of these log entries after the above daily cron
>>>between 3am and 5am:
>>>SelfCheck: Database status OK.
>>>
>>>So, since the Database is OK 99.9% of the time, why is it suddenly
>>>not OK at 5am?
>>>There are no cron jobs scheduled for 5am.

--
Matus UHLAR - fantomas, uhlar@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Silvester Stallone: Father of the RISC concept.

_______________________________________________

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users

Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Mailing List Archive

Mailing List Archive

Attached Files: