Mailing List Archive: [clamav-users] freshclam daemon fails updating process

[clamav-users] freshclam daemon fails updating process

Sep 14, 2020, 2:28 AM

Post #1 of 5 (568 views)

Good morning,

We are trying to use the freshclam as a daemon service.

If we start the update process from terminal, we don't notice any problem but when freshclam starts as daemon, it's not able to complete that process. We share freshclam.log output in such conditions:

Mon Sep 14 11:07:12 2020 -> --------------------------------------
Mon Sep 14 11:07:12 2020 -> freshclam daemon 0.102.4 (OS: linux-gnu, ARCH: x86_64, CPU: x86_64)
Mon Sep 14 11:07:12 2020 -> ClamAV update process started at Mon Sep 14 11:07:12 2020
Mon Sep 14 11:07:12 2020 -> Current working dir is /var/clamav/
Mon Sep 14 11:07:12 2020 -> Querying current.cvd.clamav.net
Mon Sep 14 11:07:12 2020 -> TTL: 1546
Mon Sep 14 11:07:12 2020 -> fc_dns_query_update_info: Software version from DNS: 0.102.4
Mon Sep 14 11:07:12 2020 -> Current working dir is /var/clamav/
Mon Sep 14 11:07:12 2020 -> check_for_new_database_version: No local copy of "daily" database.
Mon Sep 14 11:07:12 2020 -> query_remote_database_version: daily.cvd version from DNS: 25929
Mon Sep 14 11:07:12 2020 -> daily database available for download (remote version: 25929)
Mon Sep 14 11:07:12 2020 -> Retrieving https://database.clamav.net/daily.cvd
Mon Sep 14 11:07:12 2020 -> downloadFile: Download source: https://database.clamav.net/daily.cvd
Mon Sep 14 11:07:12 2020 -> downloadFile: Download destination: /var/clamav/tmp.44050/clamav-d4bf4c9f43591f8d2c23bbb224d4c0e2.tmp
Mon Sep 14 11:07:22 2020 -> WARNING: Download failed (28) Mon Sep 14 11:07:22 2020 -> WARNING: Message: Timeout was reached
Mon Sep 14 11:07:22 2020 -> WARNING: getcvd: Can't download daily.cvd from https://database.clamav.net/daily.cvd
Mon Sep 14 11:07:22 2020 -> Trying again in 5 secs...

We share the same output when we use freshclam from terminal (we have tried to use clamav user to simulate the same stage):

[root@server ~]# sudo -E -u clamav freshclam -v
...
Mon Sep 14 11:09:25 2020 -> --------------------------------------
on Sep 14 11:09:25 2020 -> ClamAV update process started at Mon Sep 14 11:09:25 2020
Mon Sep 14 11:09:25 2020 -> Current working dir is /var/clamav/
Mon Sep 14 11:09:25 2020 -> Querying current.cvd.clamav.net
Mon Sep 14 11:09:25 2020 -> TTL: 1412
Mon Sep 14 11:09:25 2020 -> fc_dns_query_update_info: Software version from DNS: 0.102.4
Mon Sep 14 11:09:25 2020 -> Current working dir is /var/clamav/
Mon Sep 14 11:09:25 2020 -> check_for_new_database_version: No local copy of "daily" database.
Mon Sep 14 11:09:25 2020 -> query_remote_database_version: daily.cvd version from DNS: 25929
Mon Sep 14 11:09:25 2020 -> daily database available for download (remote version: 25929)
Mon Sep 14 11:09:25 2020 -> Retrieving https://database.clamav.net/daily.cvd
Mon Sep 14 11:09:25 2020 -> downloadFile: Download source: https://database.clamav.net/daily.cvd
Mon Sep 14 11:09:25 2020 -> downloadFile: Download destination: /var/clamav/tmp.36972/clamav-62544403153435cc25097e8879fbbc16.tmp
Mon Sep 14 11:09:40 2020 -> updatedb: Running g_cb_download_complete callback...
Mon Sep 14 11:09:40 2020 -> download_complete_callback: Download complete for database : /var/clamav/tmp.36972/clamav-62544403153435cc25097e8879fbbc16.tmp-daily.cvd
Mon Sep 14 11:09:40 2020 -> download_complete_callback: fc_context->bTestDatabases : 1
Mon Sep 14 11:09:40 2020 -> download_complete_callback: fc_context->bBytecodeEnabled : 1
Mon Sep 14 11:09:40 2020 -> Testing database: '/var/clamav/tmp.36972/clamav-62544403153435cc25097e8879fbbc16.tmp-daily.cvd' ...
Mon Sep 14 11:09:40 2020 -> Loading signatures from /var/clamav/tmp.36972/clamav-62544403153435cc25097e8879fbbc16.tmp-daily.cvd
Mon Sep 14 11:10:05 2020 -> Properly loaded 4352681 signatures from /var/clamav/tmp.36972/clamav-62544403153435cc25097e8879fbbc16.tmp-daily.cvd
Mon Sep 14 11:10:06 2020 -> Database test passed.
Mon Sep 14 11:10:06 2020 -> daily.cvd updated (version: 25929, sigs: 4316395, f-level: 63, builder: raynman)
Mon Sep 14 11:10:06 2020 -> fc_update_database: daily.cvd updated.
...

Please, any clue to fix this behavior would be pretty appreciate.

Thanks and kind regards.

[https://mhisignature.s3-eu-west-1.amazonaws.com/MHI_FIRMA_SAM.JPG]
http://www.melia.com/
Ofertas exclusivas y garantía del mejor precio online.
Exclusive special offers and best online rate guarantee.

ADVERTENCIA LEGAL:
El contenido de este mail es confidencial y dirigido únicamente a su destinatario. Para acceder a su cláusula de privacidad completa pulse aquí<https://www.melia.com/es/privacy.htm>.

LEGAL ADVISORY:
This message is confidential and intended only for the person or entity to which it is addressed. In order to read its privacy policy click here<https://www.melia.com/en/privacy.htm>.

_______________________________________________

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users

Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] freshclam daemon fails updating process [ In reply to ]

clamav-users at lists

Sep 14, 2020, 3:37 AM

Post #2 of 5 (568 views)

Permalink

Hi there,

On Mon, 14 Sep 2020, Barbero Real, Miquel wrote:

> ...
> Mon Sep 14 11:07:12 2020 -> Retrieving https://database.clamav.net/daily.cvd
> Mon Sep 14 11:07:12 2020 -> downloadFile: Download source: https://database.clamav.net/daily.cvd
> Mon Sep 14 11:07:12 2020 -> downloadFile: Download destination: /var/clamav/tmp.44050/clamav-d4bf4c9f43591f8d2c23bbb224d4c0e2.tmp
> Mon Sep 14 11:07:22 2020 -> WARNING: Download failed (28) Mon Sep 14 11:07:22 2020 -> WARNING: Message: Timeout was reached
> ...
> Please, any clue to fix this behavior would be pretty appreciate.

Look at ReceiveTimeout in freschlam.conf. It looks like you have it
set to about 10 seconds which is far too short to load a full recent
daily database, although it would work for the incremental updates.

The default on a new installation now is I think 1800 (half an hour).

--

73,
Ged.

_______________________________________________

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users

Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] freshclam daemon fails updating process [ In reply to ]

miquel.barbero at melia

Sep 14, 2020, 3:43 AM

Post #3 of 5 (568 views)

Permalink

Thanks for your reply but I must say I did that change before sending my mail.

These are the current values we are using in that file:

# cat /etc/freshclam.conf | grep -Ev '^#|^$'
UpdateLogFile /var/log/clamav/freshclam.log
LogFileMaxSize 2M
LogTime yes
PidFile /var/run/clamav/freshclam.pid
DatabaseMirror db.clamav.net
DatabaseMirror db.local.clamav.net
ConnectTimeout 10
ReceiveTimeout 120

Thanks again and kind regards.

-----Mensaje original-----
De: clamav-users <clamav-users-bounces@lists.clamav.net> En nombre de G.W. Haywood via clamav-users
Enviado el: lunes, 14 de septiembre de 2020 12:38
Para: ClamAV users ML <clamav-users@lists.clamav.net>
CC: G.W. Haywood <clamav@jubileegroup.co.uk>
Asunto: Re: [clamav-users] freshclam daemon fails updating process

CAUTION: This email originated from outside your organization. Exercise caution when opening attachments or on clicking links from unknown senders.

Hi there,

On Mon, 14 Sep 2020, Barbero Real, Miquel wrote:

> ...

> Mon Sep 14 11:07:12 2020 -> Retrieving https://database.clamav.net/daily.cvd

> Mon Sep 14 11:07:12 2020 -> downloadFile: Download source: https://database.clamav.net/daily.cvd

> Mon Sep 14 11:07:12 2020 -> downloadFile: Download destination: /var/clamav/tmp.44050/clamav-d4bf4c9f43591f8d2c23bbb224d4c0e2.tmp

> Mon Sep 14 11:07:22 2020 -> WARNING: Download failed (28) Mon Sep 14 11:07:22 2020 -> WARNING: Message: Timeout was reached

> ...

> Please, any clue to fix this behavior would be pretty appreciate.

Look at ReceiveTimeout in freschlam.conf. It looks like you have it

set to about 10 seconds which is far too short to load a full recent

daily database, although it would work for the incremental updates.

The default on a new installation now is I think 1800 (half an hour).

--

73,

Ged.

_______________________________________________

clamav-users mailing list

clamav-users@lists.clamav.net

https://lists.clamav.net/mailman/listinfo/clamav-users

Help us build a comprehensive ClamAV guide:

https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

[https://mhisignature.s3-eu-west-1.amazonaws.com/MHI_FIRMA_SAM.JPG]
http://www.melia.com/
Ofertas exclusivas y garantía del mejor precio online.
Exclusive special offers and best online rate guarantee.

ADVERTENCIA LEGAL:
El contenido de este mail es confidencial y dirigido únicamente a su destinatario. Para acceder a su cláusula de privacidad completa pulse aquí<https://www.melia.com/es/privacy.htm>.

LEGAL ADVISORY:
This message is confidential and intended only for the person or entity to which it is addressed. In order to read its privacy policy click here<https://www.melia.com/en/privacy.htm>.

_______________________________________________

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users

Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] freshclam daemon fails updating process [ In reply to ]

clamav-users at lists

Sep 14, 2020, 4:49 AM

Post #4 of 5 (568 views)

Permalink

Hi there,

On Mon, 14 Sep 2020, Barbero Real, Miquel wrote:
> G.W. Haywood wrote:
>> On Mon, 14 Sep 2020, Barbero Real, Miquel wrote:
>>> ...
>>> Mon Sep 14 11:07:12 2020 -> Retrieving https://database.clamav.net/daily.cvd
>>> Mon Sep 14 11:07:12 2020 -> downloadFile: Download source: https://database.clamav.net/daily.cvd
>>> Mon Sep 14 11:07:12 2020 -> downloadFile: Download destination: /var/clamav/tmp.44050/clamav-d4bf4c9f43591f8d2c23bbb224d4c0e2.tmp
>>> Mon Sep 14 11:07:22 2020 -> WARNING: Download failed (28) Mon Sep 14 11:07:22 2020 -> WARNING: Message: Timeout was reached
>>> ...
>>
>>> Please, any clue to fix this behavior would be pretty appreciate.
>>
>> Look at ReceiveTimeout in freschlam.conf. It looks like you have it
>> set to about 10 seconds which is far too short to load a full recent
>> daily database, although it would work for the incremental updates.
>> ...
>
> Thanks for your reply but I must say I did that change before sending my mail.
>
> These are the current values we are using in that file:
> ...
> ConnectTimeout 10
> ...

Hmmmm.

--

73,
Ged.

_______________________________________________

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users

Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] freshclam daemon fails updating process [ In reply to ]

clamav-users at lists

Sep 14, 2020, 4:56 PM

Post #5 of 5 (568 views)

Permalink

Dear Miquel,

I had the same problem.

I backed up, in compressed format, all the old log files.(As they aren't
needed, except for historical reasons, I may deleted them.) Then, using
Synaptic, I did a 'Complete Removal' i.e. purge,of all the ClamAV
packages, to ensure that configuration files are removed.

    • clamav
    • clamav-milter
    • clamav-daemon
    • clamav-freshclam
    • clamdscan
    • clamav-base
    • clamav-docs
    • libclamunrar7
    • libclamav7
    • libclamav9

Finally I installed them all again. That solved my problem.

On 2020-09-14 05:28, Barbero Real, Miquel wrote:
> Good morning,
>
> We are trying to use the freshclam as a daemon service.
>
> If we start the update process from terminal, we don't notice any problem but when freshclam starts as daemon, it's not able to complete that process. We share freshclam.log output in such conditions:
>
> Mon Sep 14 11:07:12 2020 -> --------------------------------------
> Mon Sep 14 11:07:12 2020 -> freshclam daemon 0.102.4 (OS: linux-gnu, ARCH: x86_64, CPU: x86_64)
> Mon Sep 14 11:07:12 2020 -> ClamAV update process started at Mon Sep 14 11:07:12 2020
> Mon Sep 14 11:07:12 2020 -> Current working dir is /var/clamav/
> Mon Sep 14 11:07:12 2020 -> Querying current.cvd.clamav.net
> Mon Sep 14 11:07:12 2020 -> TTL: 1546
> Mon Sep 14 11:07:12 2020 -> fc_dns_query_update_info: Software version from DNS: 0.102.4
> Mon Sep 14 11:07:12 2020 -> Current working dir is /var/clamav/
> Mon Sep 14 11:07:12 2020 -> check_for_new_database_version: No local copy of "daily" database.
> Mon Sep 14 11:07:12 2020 -> query_remote_database_version: daily.cvd version from DNS: 25929
> Mon Sep 14 11:07:12 2020 -> daily database available for download (remote version: 25929)
> Mon Sep 14 11:07:12 2020 -> Retrieving https://database.clamav.net/daily.cvd
> Mon Sep 14 11:07:12 2020 -> downloadFile: Download source: https://database.clamav.net/daily.cvd
> Mon Sep 14 11:07:12 2020 -> downloadFile: Download destination: /var/clamav/tmp.44050/clamav-d4bf4c9f43591f8d2c23bbb224d4c0e2.tmp
> Mon Sep 14 11:07:22 2020 -> WARNING: Download failed (28) Mon Sep 14 11:07:22 2020 -> WARNING: Message: Timeout was reached
> Mon Sep 14 11:07:22 2020 -> WARNING: getcvd: Can't download daily.cvd from https://database.clamav.net/daily.cvd
> Mon Sep 14 11:07:22 2020 -> Trying again in 5 secs...
>
> We share the same output when we use freshclam from terminal (we have tried to use clamav user to simulate the same stage):
>
> [root@server ~]# sudo -E -u clamav freshclam -v
> ...
> Mon Sep 14 11:09:25 2020 -> --------------------------------------
> on Sep 14 11:09:25 2020 -> ClamAV update process started at Mon Sep 14 11:09:25 2020
> Mon Sep 14 11:09:25 2020 -> Current working dir is /var/clamav/
> Mon Sep 14 11:09:25 2020 -> Querying current.cvd.clamav.net
> Mon Sep 14 11:09:25 2020 -> TTL: 1412
> Mon Sep 14 11:09:25 2020 -> fc_dns_query_update_info: Software version from DNS: 0.102.4
> Mon Sep 14 11:09:25 2020 -> Current working dir is /var/clamav/
> Mon Sep 14 11:09:25 2020 -> check_for_new_database_version: No local copy of "daily" database.
> Mon Sep 14 11:09:25 2020 -> query_remote_database_version: daily.cvd version from DNS: 25929
> Mon Sep 14 11:09:25 2020 -> daily database available for download (remote version: 25929)
> Mon Sep 14 11:09:25 2020 -> Retrieving https://database.clamav.net/daily.cvd
> Mon Sep 14 11:09:25 2020 -> downloadFile: Download source: https://database.clamav.net/daily.cvd
> Mon Sep 14 11:09:25 2020 -> downloadFile: Download destination: /var/clamav/tmp.36972/clamav-62544403153435cc25097e8879fbbc16.tmp
> Mon Sep 14 11:09:40 2020 -> updatedb: Running g_cb_download_complete callback...
> Mon Sep 14 11:09:40 2020 -> download_complete_callback: Download complete for database : /var/clamav/tmp.36972/clamav-62544403153435cc25097e8879fbbc16.tmp-daily.cvd
> Mon Sep 14 11:09:40 2020 -> download_complete_callback: fc_context->bTestDatabases : 1
> Mon Sep 14 11:09:40 2020 -> download_complete_callback: fc_context->bBytecodeEnabled : 1
> Mon Sep 14 11:09:40 2020 -> Testing database: '/var/clamav/tmp.36972/clamav-62544403153435cc25097e8879fbbc16.tmp-daily.cvd' ...
> Mon Sep 14 11:09:40 2020 -> Loading signatures from /var/clamav/tmp.36972/clamav-62544403153435cc25097e8879fbbc16.tmp-daily.cvd
> Mon Sep 14 11:10:05 2020 -> Properly loaded 4352681 signatures from /var/clamav/tmp.36972/clamav-62544403153435cc25097e8879fbbc16.tmp-daily.cvd
> Mon Sep 14 11:10:06 2020 -> Database test passed.
> Mon Sep 14 11:10:06 2020 -> daily.cvd updated (version: 25929, sigs: 4316395, f-level: 63, builder: raynman)
> Mon Sep 14 11:10:06 2020 -> fc_update_database: daily.cvd updated.
> ...
>
> Please, any clue to fix this behavior would be pretty appreciate.
>
> Thanks and kind regards.
>
>
> [https://mhisignature.s3-eu-west-1.amazonaws.com/MHI_FIRMA_SAM.JPG]
> http://www.melia.com/
> Ofertas exclusivas y garantía del mejor precio online.
> Exclusive special offers and best online rate guarantee.
>
> ADVERTENCIA LEGAL:
> El contenido de este mail es confidencial y dirigido únicamente a su destinatario. Para acceder a su cláusula de privacidad completa pulse aquí<https://www.melia.com/es/privacy.htm>.
>
> LEGAL ADVISORY:
> This message is confidential and intended only for the person or entity to which it is addressed. In order to read its privacy policy click here<https://www.melia.com/en/privacy.htm>.
>
> _______________________________________________
>
> clamav-users mailing list
> clamav-users@lists.clamav.net
> https://lists.clamav.net/mailman/listinfo/clamav-users
>
>
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
>
> http://www.clamav.net/contact.html#ml

--
Udvarias Ur

This letter was generated and sent from Thunderbird 60.9.0 on Ubuntu Linux 16.04.6 LTS.

Cette lettre a été générée et envoyée à partir de Thunderbird 60.9.0 sur Ubuntu Linux 16.04.6 LTS.

_______________________________________________

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users

Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml