|Main Archive Page > Month Archives > clamav-users archives|
firstname.lastname@example.org wrote: > On Thursday 25 October 2007 04:42:59 René Berber wrote: >
>> linuxmaillists wrote:
>>> I am getting this error message in my root e-mail:
>>> Could not connect to ClamAV daemon: Connection refused
>>> Looks like ClamAV daemon is not OK. Check up database integrity
>>> and restart daemon
>>> I cannot find any information for how to do what the above
>>> error message suggests. If the information is in the man page
>>> for ClamAv where and what is it?
>> No it's not in the manpage, the procedure depends on what you
>> have installed alongside clamd, clamdmon is obvious, some script
>> that downloads third party databases probably, perhaps something
>>> I also can't find any information on how to use this clamdmon
>>> and there is no man page for it.
>> Clamdmon is a program and a script, you are receiving the email
>> that the script sends (from cron) when it detects a problem. The
>> script also tries to restart clamd, so first thing is to check if
>> clamd is running (the script was successful restarting clamd), if
>> not then you should look into the clamd log and see, at the end,
>> if an error is reported; perhaps that will give you enough clues
>> to determine what is wrong.
>> If clamd still can't start, then you probably have to move out of
>> the way each of the 3rd party databases, and see which one is the
>> cause of the problem.
> > Thanks for the info > _______________________________________________ > Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net > http://lurker.clamav.net/list/clamav-users.html > >
Probably related - several of our servers this morning downloaded a sanesecurity gzip file that gunzip would fail to unzip:
gunzip: stdin: invalid compressed data--format violated
clamd would fail to start because of the bad data.
Quick fix is to delete all files in /var/lib/clamav and restart clamd and reload all databases, etc...
If you're using scamp.sh to download sanesecurity sigs, modify it to test for the return code of gunzip. -- Roberto Ullfig - email@example.com _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html