Clamd update [RESOLVED]

[TheTAZ57]

Hi there

I got a little problem.

Clamav dont take the new signatures files, I got no message, no error, nothing...

When I do a manual freshclam it udpate the database...

Any suggestion??

regards

[karesmakro]

Is there any freshclam service hanging?
Please try a

Code: Select all

ps -A | grep fresh

and post output, if there is any!

[TheTAZ57]

Thanks .
I do the code and there's no ouput or message,

So I wait until the next update in 25 minutes...

so long

[TheTAZ57]

So no update...
A another suggestion ?

so long

[Severus]

Hi,
what says the Antivirus GUI about the updates?
Are they *always enabled* and what time cycle?
Look at the files

Code: Select all

/var/log/copfilter/default/etc/clamd_counter and
/var/log/copfilter/default/etc/clamd_counter.conf

Do they exist and what's the value inside? The value of clamd_counter.conf should be your time setting from the GUI in minutes.
Then look at /tmp for any file check-updates_clamav. If existing it may prevent the update to run in case you use a modded update file for 3rd_party_sigs.
Then enter top command at the console and search for a running freshclam process. If present kill it.
Hope that will help you.
Regards Severus

[TheTAZ57]

So
In the gui the time cycling is 1 hour, and clamav is always enabled
in clamd_counter the value is 20
in clamd_conter.conf the value is 25 <= there is a problem with the value in the gui it should be 60 no?

in /tmp I got 162 files like clamav-(30digits) with differents sizes
do i delete them?

and there is no freshclam process

I've installed the 3rd_party_sigs

so long

[Severus]

in /tmp I got 162 files like clamav-(30digits) with differents sizes

The file I searched for should be unique, named check-updates_clamav with size=0.
The clamd_counter file should change it's value every 5 minutes: Try to check if done.
If value changes to 0 five minutes later top should show the start of check-updates_clamav.sh and, done by this file, freshclam.
Check if this will be done.
Next: Did you check for the signature files date on GUI or did you only have no update message? In this case: Are you sure you didn't install my mod for preventing the update messages?
You have installed the 3rd_party_sig mod: Did you refer to these updates and not to the updates done by freshclam?
Last: What's your clamav version? Versions earlier than 0.95 will no longer update sigfiles. The support for these versions ended if I remember well in April or May.
Regards Severus

[TheTAZ57]

so clamd_change it's value
When it goes to 0
five minutes later I saw nothing in top

clamav version is the 0.96.1

I check the update in the gui and the number show is 11220, but the actual number (on other ipcop) is 11231

The updates of 3rd_party_sigs works, some dates are on june 21

Shoul I uninstall 3rd_party_sigs to see what appen??

so long

[Severus]

uninstall 3rd_party_sig seems not to be necessary.
type fcrontab -l on the command line and search for an entry like

Code: Select all

*/5 * * * * root /usr/local/bin/copfilter_cron

If present goto /usr/local/bin/copfilter_cron and search for

Code: Select all

if [ $(cat $BASEDIR/etc/global_settings | grep CLAMD_UPDATE_METHOD |grep periodic) ] && [ -e $BASEDIR/etc/clamd_counter ]; then
   if [ $(cat $BASEDIR/etc/clamd_counter) -gt 0 ]; then
      echo $(($(cat $BASEDIR/etc/clamd_counter)-5)) > $BASEDIR/etc/clamd_counter
   else
                if [ -e /var/ipcop/red/active ]; then
                        $BASEDIR/opt/tools/bin/check-updates_clamav.sh
                        # reset counter variable
         rm -f $BASEDIR/etc/clamd_counter
                        cp -p $BASEDIR/etc/clamd_counter.conf $BASEDIR/etc/clamd_counter
                else
                        echo "no internet connection available, so no updates will be downloaded"
                fi
   fi
else
   if [ $(cat $BASEDIR/etc/global_settings | grep CLAMD_ENABLE |grep on) ];then
      echo "either CLAMD_UPDATE_METHOD is not periodic or clamd_counter doesn't exist"
   fi
fi


At last you may look for a file /var/log/copfilter/default/etc/clamd_enable (size=0). Some processes still need this file. But if clamd is running (it is running? or not?) this file shoult be present.
regards Severus

[TheTAZ57]

with fcrontab -l
I found this tline

Code: Select all

*/5 * * * *     /usr/local/bin/copfilter_cron >> /var/log/copfilter/default/opt/tools/var/log/copfilter_cron.log 2>&1

in /usr/local/bin/copfilter_cron I found the code you show
here is my file code

Code: Select all

if [ $(cat $BASEDIR/etc/global_settings | grep CLAMD_UPDATE_METHOD |grep periodic) ] && [ -e $BASEDIR/etc/clamd_counter ]; then
   if [ $(cat $BASEDIR/etc/clamd_counter) -gt 0 ]; then
      echo $(($(cat $BASEDIR/etc/clamd_counter)-5)) > $BASEDIR/etc/clamd_counter
   else
                if [ -e /var/ipcop/red/active ]; then
                        $BASEDIR/opt/tools/bin/check-updates_clamav.sh
                        # reset counter variable
         rm -f $BASEDIR/etc/clamd_counter
                        cp -p $BASEDIR/etc/clamd_counter.conf $BASEDIR/etc/clamd_counter
                else
                        echo "no internet connection available, so no updates will be downloaded"
                fi
   fi
else
   if [ $(cat $BASEDIR/etc/global_settings | grep CLAMD_ENABLE |grep on) ];then
      echo "either CLAMD_UPDATE_METHOD is not periodic or clamd_counter doesn't exist"
   fi
fi

and the clamd_enable file with size 0 exist

thanks for your help

so long