clamav-users October 2007 archive
Main Archive Page > Month Archives  > clamav-users archives
clamav-users: Re: [Clamav-users] Check up database integrity and

Re: [Clamav-users] Check up database integrity and restart daemon Help?

From: Roberto Ullfig <rullfig_at_nospam>
Date: Thu Oct 25 2007 - 18:02:56 GMT
To: ClamAV users ML <clamav-users@lists.clamav.net>


linuxmaillists@charter.net wrote: > On Thursday 25 October 2007 04:42:59 René Berber wrote: >
>> linuxmaillists wrote:
>>
>>> I am getting this error message in my root e-mail:
>>>
>>> Could not connect to ClamAV daemon: Connection refused
>>> Looks like ClamAV daemon is not OK. Check up database integrity
>>> and restart daemon
>>>
>>> I cannot find any information for how to do what the above
>>> error message suggests. If the information is in the man page
>>> for ClamAv where and what is it?
>>>
>> No it's not in the manpage, the procedure depends on what you
>> have installed alongside clamd, clamdmon is obvious, some script
>> that downloads third party databases probably, perhaps something
>> else.
>>
>>
>>> I also can't find any information on how to use this clamdmon
>>> and there is no man page for it.
>>>
>> Clamdmon is a program and a script, you are receiving the email
>> that the script sends (from cron) when it detects a problem. The
>> script also tries to restart clamd, so first thing is to check if
>> clamd is running (the script was successful restarting clamd), if
>> not then you should look into the clamd log and see, at the end,
>> if an error is reported; perhaps that will give you enough clues
>> to determine what is wrong.
>>
>> If clamd still can't start, then you probably have to move out of
>> the way each of the 3rd party databases, and see which one is the
>> cause of the problem.
>>
> > Thanks for the info > _______________________________________________ > Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net > http://lurker.clamav.net/list/clamav-users.html > >
Probably related - several of our servers this morning downloaded a sanesecurity gzip file that gunzip would fail to unzip:

gunzip: stdin: invalid compressed data--format violated

clamd would fail to start because of the bad data.

Quick fix is to delete all files in /var/lib/clamav and restart clamd and reload all databases, etc...

If you're using scamp.sh to download sanesecurity sigs, modify it to test for the return code of gunzip. -- Roberto Ullfig - rullfig@uic.edu _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html