SV: Problem with ClamAV update

[Steen, Glenn]

    [ The following text is in the "Windows-1252" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

Perhaps you'll see something in /tmpClamav.update.log (or whatever it'scalled ... I'm @home:-)?

-- Glenn

-----Ursprungligt meddelande-----
Från:	MailScanner mailing list genom Ugo Bellavance
Skickat:	sö 2005-06-12 15:45
Till:	MAILSCANNER at JISCMAIL.AC.UK
Kopia:	
Ämne:	Problem with ClamAV update
Hi,

I get weird result from autoupdate on one of my servers:

Excerpt from a 'sane' server:

[root at sane root]# grep updated /var/log/maillog
Jun 12 08:03:52 sane ClamAV-autoupdate[9824]: ClamAV updated
Jun 12 09:09:29 sane ClamAV-autoupdate[18865]: ClamAV updated
[root at sane root]# clamscan -V
ClamAV 0.85.1/929/Sun Jun 12 08:11:33 2005
[root at sane root]# date
Sun Jun 12 09:40:48 EDT 2005

Excerpt from problematic server

[root at insanelog]# grep updated /var/log/maillog
Jun 12 05:01:45 instane ClamAV-autoupdate[5501]: ClamAV updated
Jun 12 06:02:10 insane ClamAV-autoupdate[6012]: ClamAV updated
[root at insane log]# clamscan -V
ClamAV 0.85.1/919/Tue Jun  7 08:26:14 2005
[root at insane log]# date
Sun Jun 12 06:39:11 PDT 2005

The logs say it is updating, around the same time as my other server
(differences in time is because of timezone), but the definition # is
not reflecting the update. If I run freshclam manually:

[root at insanelog]# freshclam
ClamAV update process started at Sun Jun 12 06:42:37 2005
main.cvd is up to date (version: 32, sigs: 34720, f-level: 5, builder:
tkojm)
Downloading daily.cvd [*]
daily.cvd updated (version: 929, sigs: 798, f-level: 5, builder: diego)
Database updated (35518 signatures) from database.clamav.net (IP:
195.92.99.99)
[root at insane log]# clamscan -V
ClamAV 0.85.1/929/Sun Jun 12 05:11:33 2005

Any ideas?

Should I enable the log in freshclam.conf?

Regards,

Ugo

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the Wiki (http://wiki.mailscanner.info/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the Wiki (http://wiki.mailscanner.info/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!