Re: [Clamav-users] Problem with main.cvd and daily.inc ?

From: George R.Kasica <georgek_at_nospam>
Date: Tue Dec 25 2007 - 15:50:06 GMT
To: ClamAV users ML <clamav-users@lists.clamav.net>

We are seeing the same things here on multiple servers (40+) and have made no configuration changes in the recent past that would lead to this, our database directive also match. Catch here is the program is still running - only thing is we do a restart of it once a day on this server dith an update to spam checking, etc.

# /usr/local/bin/freshclam -v
Current working dir is /usr/local/share/clamav Max retries == 5
ClamAV update process started at Tue Dec 25 09:42:50 2007 Querying current.cvd.clamav.net
TTL: 295
Software version from DNS: 0.92
main.cvd version from DNS: 45
main.cvd is up to date (version: 45, sigs: 169676, f-level: 21, builder: sven)
daily.cvd version from DNS: 5248
daily.inc is up to date (version: 5248, sigs: 11338, f-level: 21, builder: ccordes)

# cd clamav/
# ll
total 11108 drwxr-xr-x 2 clamav clamav 4096 Dec 25 06:27 daily.inc
-rw-rw-r-- 1 clamav clamav 11347852 Dec 15 06:47 main.cvd
-rw------- 1 clamav clamav 1144 Dec 25 09:42 mirrors.dat
# ll daily.inc/ total 928
-rw-r--r-- 1 clamav clamav 17992 Dec 15 07:48 COPYING
-rw-r--r-- 1 clamav clamav 74 Dec 15 07:48 daily.cfg
-rw-r--r-- 1 clamav clamav 25911 Dec 15 07:48 daily.db
-rw-r--r-- 1 clamav clamav 3881 Dec 15 07:48 daily.fp
-rw-r--r-- 1 clamav clamav 2202 Dec 16 18:16 daily.hdb
-rw-r--r-- 1 clamav clamav 1116 Dec 15 07:48 daily.hdu
-rw-r--r-- 1 clamav clamav 586 Dec 25 01:18 daily.info
-rw-r--r-- 1 clamav clamav 569928 Dec 25 01:18 daily.mdb
-rw-r--r-- 1 clamav clamav 24754 Dec 18 09:20 daily.mdu
-rw-r--r-- 1 clamav clamav 245934 Dec 25 00:18 daily.ndb
-rw-r--r-- 1 clamav clamav 4458 Dec 15 07:48 daily.ndu
-rw-r--r-- 1 clamav clamav 2864 Dec 24 05:17 daily.pdb
-rw-r--r-- 1 clamav clamav 963 Dec 15 07:48 daily.wdb
-rw-r--r-- 1 clamav clamav 2922 Dec 15 07:48 daily.zmd

On another machine where we don't restart the daemons we see the same thing directory wise that you do, but again, the program is running normally, not failing:

# ll
total 24 drwxr-xr-x 2 clamav clamav 4096 2007-12-25 00:59 daily.inc drwxr-xr-x 2 clamav clamav 4096 2007-12-25 00:59 main.inc
-rw------- 1 clamav clamav 1404 2007-12-25 09:48 mirrors.dat

# ll daily.inc/
total 956
-rw-r--r-- 1 clamav clamav 17992 2007-07-10 10:54 COPYING
-rw-r--r-- 1 clamav clamav 74 2007-12-08 18:34 daily.cfg
-rw-r--r-- 1 clamav clamav 25911 2007-12-09 11:37 daily.db
-rw-r--r-- 1 clamav clamav 3881 2007-12-09 11:36 daily.fp
-rw-r--r-- 1 clamav clamav 2202 2007-12-16 18:16 daily.hdb
-rw-r--r-- 1 clamav clamav 1116 2007-11-21 03:18 daily.hdu
-rw-r--r-- 1 clamav clamav 586 2007-12-25 00:59 daily.info
-rw-r--r-- 1 clamav clamav 569928 2007-12-25 00:59 daily.mdb
-rw-r--r-- 1 clamav clamav 24754 2007-12-18 09:17 daily.mdu
-rw-r--r-- 1 clamav clamav 245934 2007-12-24 23:59 daily.ndb
-rw-r--r-- 1 clamav clamav 4458 2007-10-31 14:26 daily.ndu
-rw-r--r-- 1 clamav clamav 2864 2007-12-24 05:59 daily.pdb
-rw-r--r-- 1 clamav clamav 963 2007-12-08 22:35 daily.wdb
-rw-r--r-- 1 clamav clamav 2922 2007-09-03 14:04 daily.zmd

# ll main.inc/
total 23832
-rw-r--r-- 1 clamav clamav 17992 2007-07-20 12:26 COPYING
-rw-r--r-- 1 clamav clamav 4735470 2007-12-09 10:36 main.db
-rw-r--r-- 1 clamav clamav 3881 2007-12-09 10:36 main.fp
-rw-r--r-- 1 clamav clamav 648469 2007-12-09 10:36 main.hdb
-rw-r--r-- 1 clamav clamav 318 2007-12-09 10:36 main.info
-rw-r--r-- 1 clamav clamav 4335069 2007-12-09 10:36 main.mdb
-rw-r--r-- 1 clamav clamav 14575772 2007-12-09 10:36 main.ndb
-rw-r--r-- 1 clamav clamav 217 2007-07-20 12:26 main.zmd
>[root@test32 etc]#grep DatabaseDirectory * >clamd.conf:DatabaseDirectory /var/lib/clamav >freshclam.conf:DatabaseDirectory /var/lib/clamav > >No I don't think so. > >Thanks. > >At 18:14 24/12/2007, replies-lists-clamav@listmail.innovate.net wrote: >>I suspect that your: >> >> DatabaseDirectory >> >>directives are different in your clamd.conf and freshclam.conf files. >> >> - Rick >> >> >>------------ Original Message ------------ >> > Date: Monday, December 24, 2007 05:59:38 PM +0100 >> > From: "Nicolas Croiset (Campus Grenoble 90,8)" >><nicolas.croiset@brume.org> >> > To: clamav-users@lists.clamav.net >> > Subject: [Clamav-users] Problem with main.cvd and daily.inc ? >> > >> > Hello, >> > >> > after a few hours / days the files main.cvd and daily.inc are >> > replaced by a directory where you have files inside. >> > >> > When the file main.cvd is replaced by a directory I obtain this >> > error LibClamAV Error: cli_cvdverify: Can't read CVD header >> > >> > Is it normal that you can have directory instead of files for the >> > databases ? >> > >> >>---------- End Original Message ---------- > >+------------------------------------------------------------+ >| E-mail : Nicolas.Croiset@brume.org | >| Annuaire des radios AM/FM/DAB : http://www.annuradio.fr/ | >+------------------------------------------------------------+ > >_______________________________________________ >Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net >http://lurker.clamav.net/list/clamav-users.html
--
===[George R. Kasica]=== +1 262 677 0766 President +1 206 374 6482 FAX Netwrx Consulting Inc. Jackson, WI USA http://www.netwrx1.com
georgek@netwrx1.com
ICQ #12862186

Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html

This message: [ Message body ]
Next message: G.W. Haywood: "Re: [Clamav-users] Email viruses almost non-existent?"
Previous message: Nicolas Croiset (Campus Grenoble 90,8): "Re: [Clamav-users] Problem with main.cvd and daily.inc ?"
In reply to: Nicolas Croiset (Campus Grenoble 90,8): "Re: [Clamav-users] Problem with main.cvd and daily.inc ?"

Contemporary messages sorted: [ By Date ] [ By Thread ] [ By Subject ] [ By Author ]