Difference between revisions of "Clamav:freshclam update"

From SME Server
Jump to navigationJump to search
m (syntax and grammer)
Line 1: Line 1:
Sometime you can have errors of clamav which ask to download some files as below, The admin account can receive a lot of emails on its mailbox, when clamav try to update its database, several by days.
+
On occasion there can be errors with clamav which can relate to the download of update files as shown below. The admin account can be flooded by emails when clamav tries to update its database, this can occur several times a day.
  
 
  freshclam: Update failed
 
  freshclam: Update failed
Line 11: Line 11:
 
  2013-03-02 22:58:52.561968500 Update failed. Your network may be down or none of the mirrors listed in /etc/freshclam.conf is working. Check http://www.clamav.net/support/mirror-problem for possible reasons.
 
  2013-03-02 22:58:52.561968500 Update failed. Your network may be down or none of the mirrors listed in /etc/freshclam.conf is working. Check http://www.clamav.net/support/mirror-problem for possible reasons.
  
{{Tip box|This is a workaround to have a new database without complaints of clamav. use a root terminal to perform these commands.}}
+
{{Tip box|This is a workaround to create a new database solving the error condition of clamav. Use a root terminal to perform these commands.}}
  
 
Shutdown clam so clamd.socket file is removed
 
Shutdown clam so clamd.socket file is removed
Line 19: Line 19:
 
  cd /var/clamav
 
  cd /var/clamav
  
which showed as just 5 files in the /var/clamav folder:
+
which showes just 5 files in the /var/clamav folder:
  
 
  ls -la /var/clamav
 
  ls -la /var/clamav
Line 28: Line 28:
 
  -rw-------  1 clamav clamav      104 Feb 24 14:46 mirrors.dat
 
  -rw-------  1 clamav clamav      104 Feb 24 14:46 mirrors.dat
  
{{Warning box|if you are bandwidth poor or on slow connection '''then don't delete''' main.cvd}}
+
{{Warning box|if you have limited bandwidth or on a slow connection '''then don't delete''' main.cvd}}
  
Remove ALL files from folder to provide clean slate for update process
+
Remove ALL files from folder to provide a clean slate for update process
 
  rm -f /var/clamav/* (you could skip the -f & confirm every file delete for safety)
 
  rm -f /var/clamav/* (you could skip the -f & confirm every file delete for safety)
  
Line 38: Line 38:
 
  clamav-0.97.6-1.el5.rf
 
  clamav-0.97.6-1.el5.rf
  
Update clamav to latest version if required '''it will Not downloading clamav-db'''
+
Update clamav to latest version if required '''it will Not download clamav-db'''
 
  yum update clamav
 
  yum update clamav
  
Line 64: Line 64:
 
   
 
   
  
For completeness & to be absolutely sure signal-event post-update; signal-event reboot, then go through the logs post reboot to make sure everything started correctly.  This is not necessary for this procedure but doesn't hurt.
+
Finally & to be absolutely sure signal-event post-update; signal-event reboot, then go through the logs post reboot to make sure everything started correctly.  This is not necessary for this procedure but doesn't hurt.
  
 
[[Category:Howto]]
 
[[Category:Howto]]

Revision as of 22:05, 10 March 2013

On occasion there can be errors with clamav which can relate to the download of update files as shown below. The admin account can be flooded by emails when clamav tries to update its database, this can occur several times a day.

freshclam: Update failed
2013-03-02 22:57:11.757539500 ClamAV update process started at Sat Mar  2 22:57:11 2013
2013-03-02 22:57:31.922779500 WARNING: Can't query current.cvd.clamav.net
2013-03-02 22:57:31.922783500 WARNING: Invalid DNS reply. Falling back to HTTP mode.
2013-03-02 22:57:31.923493500 Reading CVD header (main.cvd): ERROR: Can't get information about database.clamav.net: Temporary failure in name resolution
2013-03-02 22:58:52.561344500 WARNING: Can't read main.cvd header from database.clamav.net (IP: )
2013-03-02 22:58:52.561855500 Giving up on database.clamav.net...
2013-03-02 22:58:52.561968500 Update failed. Your network may be down or none of the mirrors listed in /etc/freshclam.conf is working. Check http://www.clamav.net/support/mirror-problem for possible reasons.


Information.png Tip:
This is a workaround to create a new database solving the error condition of clamav. Use a root terminal to perform these commands.


Shutdown clam so clamd.socket file is removed

service clamd stop

Navigate to clamav folder

cd /var/clamav

which showes just 5 files in the /var/clamav folder:

ls -la /var/clamav
-rw-r--r--  1 clamav clamav    60125 Feb 17 12:11 bytecode.cvd
srw-rw-rw-  1 clamav clamav        0 Feb 24 14:27 clamd.socket
-rw-r--r--  1 clamav clamav 52101120 Feb 24 11:46 daily.cld
-rw-r--r--  1 clamav clamav 30750647 Oct 11  2011 main.cvd
-rw-------  1 clamav clamav      104 Feb 24 14:46 mirrors.dat


Warning.png Warning:
if you have limited bandwidth or on a slow connection then don't delete main.cvd


Remove ALL files from folder to provide a clean slate for update process

rm -f /var/clamav/* (you could skip the -f & confirm every file delete for safety)

Current Clamav version is clamav-0.97.6

rpm -q clamav

clamav-0.97.6-1.el5.rf

Update clamav to latest version if required it will Not download clamav-db

yum update clamav

Restart clamd

service clamd start

Update signatures

freshclam -v (--no-dns can be used if just -v fails)

Check output from freshclam to make sure update completes sucessfully.

Current working dir is /var/clamav
Max retries == 6
ClamAV update process started at Sun Feb 24 15:14:02 2013
Using IPv6 aware code
Querying current.cvd.clamav.net
TTL: 900
Software version from DNS: 0.97.6
main.cvd version from DNS: 54
main.cvd is up to date (version: 54, sigs: 1044387, f-level: 60, builder: sven)
daily.cvd version from DNS: 16731
daily.cld is up to date (version: 16731, sigs: 829102, f-level: 63, builder: guitar)
bytecode.cvd version from DNS: 214
bytecode.cvd is up to date (version: 214, sigs: 41, f-level: 63, builder: neo)

Finally & to be absolutely sure signal-event post-update; signal-event reboot, then go through the logs post reboot to make sure everything started correctly. This is not necessary for this procedure but doesn't hurt.