Clam ...

[Brian May]

No matter what, it will say that ClamAV has been updated..

<snip>
if (-x $ClamUpdateCommand) {
  &LockClamAV();
  $Command = "$ClamUpdateCommand --quiet -l $LogFile";
  $Command .= " --http-proxy $HTTPproxy" if $HTTPproxy;
  system($Command);
  &UnlockClamAV();
  Sys::Syslog::syslog('info', "ClamAV updated");
} else {
  Sys::Syslog::syslog('err',
                      "ClamAV updater $ClamUpdateCommand cannot be run");
}
</snip>

Here is a No update needed output from freshclam..  I'd write something, but
I don't have the time at the moment:

[root at athena MailScanner]# freshclam
Checking for a new database - started at Tue Apr 29 09:34:31 2003
Current working dir is /usr/local/share/clamav
Connected to clamav.elektrapro.com.
Reading md5 sum (viruses.md5): OK
viruses.db is up to date.
Reading md5 sum (viruses2.md5): OK
viruses.db2 is up to date.

----- Original Message -----
From: "Julian Field" <mailscanner at ECS.SOTON.AC.UK>
To: <MAILSCANNER at JISCMAIL.AC.UK>
Sent: Tuesday, April 29, 2003 8:56 AM
Subject: Re: Clam ...


At 07:40 29/04/2003, you wrote:
>Julian,
>
>Is it possible to also detect if clam is updated ?
>
>Currently i get in the logs:
>
>Apr 29 03:01:01 vmx01 update.virus.scanners: Found clamav installed
>Apr 29 03:01:01 vmx01 update.virus.scanners: Updating clamav
>Apr 29 03:01:01 vmx01 ClamAV-autoupdate[11488]: ClamAV updated
>Apr 29 03:01:01 vmx01 update.virus.scanners: Found f-prot installed
>Apr 29 03:01:01 vmx01 update.virus.scanners: Updating f-prot
>Apr 29 03:01:02 vmx01 F-Prot autoupdate[11496]: F-Prot did not need
updating.
>
>But in fact Clam isnt updated...Its telling this hourly:
>
>Apr 29 04:01:01 vmx01 update.virus.scanners: Found clamav installed
>Apr 29 04:01:01 vmx01 update.virus.scanners: Updating clamav
>Apr 29 04:01:01 vmx01 ClamAV-autoupdate[13518]: ClamAV updated
>Apr 29 04:01:01 vmx01 update.virus.scanners: Found f-prot installed
>Apr 29 04:01:01 vmx01 update.virus.scanners: Updating f-prot
>Apr 29 04:01:02 vmx01 F-Prot autoupdate[13526]: F-Prot did not need
updating.
>
>Is the script reporting this ok ? Since i think its defaulting to the
>'ClamAV updated' all the time, even when its not updated.
>
>I saw in the auto update script of f-prot some checking, but not in the
>one for Clam, is it posible to do the same there ?

Not sure. Take a look at the clam autoupdate script and see what you think.
--
Julian Field
www.MailScanner.info
Professional Support Services at www.MailScanner.biz
MailScanner thanks transtec Computers for their support