ClamWin Free Antivirus :: View topic

Posted: Thu May 10, 2012 1:40 pm

Hi all,

Apologies if I'm in the wrong forum here - the "Win" bit in the forum name seems to suggest this may be aimed at Windows users only and this query is for RHEL, but I was really hoping someone could point me in the right direction if nothing else, as I can't find a Linux forum for ClamAV!!

Basically, my ClamAV installation (updated to latest version) keeps erroring as follows (note the "no digital signature" / "can't apply patch" and "giving up on db.gb.clamav.net messages) - it cycles through this a few times then eventually fails:

Code:

ClamAV update process started at Thu May 10 14:49:11 2012
Connecting via 10.10.10.200
main.cvd is up to date (version: 54, sigs: 1044387, f-level: 60, builder: sven)
Connecting via 10.10.10.200
Downloading daily-14906.cdiff [*]
ERROR: cdiff_apply: No digital signature in cdiff file
ERROR: getpatch: Can't apply patch
WARNING: Incremental update failed, trying to download daily.cvd
Downloading daily.cvd [*]
WARNING: [LibClamAV] cli_cvdparse: Not a CVD file
ERROR: Verification: Broken or not a CVD file
Giving up on db.gb.clamav.net...

... etc. So it looks like ClamAV is attempting to download and apply a patch but is not succeeding because it's not a CVD file; does anyone know what file it is it's complaining about? How can this be rectified?

Once it gets past this erroring, it then seems to download everything OK from 'db.local.clamav.net' and appears happy enough after that:

Code:

ClamAV update process started at Thu May 10 14:49:11 2012
Connecting via 10.10.10.200
main.cvd is up to date (version: 54, sigs: 1044387, f-level: 60, builder: sven)
Connecting via 10.10.10.200
Downloading daily-14906.cdiff [100%]
Downloading daily-14907.cdiff [100%]
Downloading daily-14908.cdiff [100%]
daily.cld updated (version: 14908, sigs: 170963, f-level: 63, builder: neo)
Connecting via 10.10.10.200
bytecode.cld is up to date (version: 169, sigs: 39, f-level: 63, builder: edwin)
Database updated (1215389 signatures) from db.local.clamav.net
Clamd successfully notified about the update.
--------------------------------------
ClamAV update process started at Thu May 10 14:50:39 2012
Connecting via 10.10.10.200
main.cvd is up to date (version: 54, sigs: 1044387, f-level: 60, builder: sven)
Connecting via 10.10.10.200
daily.cld is up to date (version: 14908, sigs: 170963, f-level: 63, builder: neo)
Connecting via 10.10.10.200
bytecode.cld is up to date (version: 169, sigs: 39, f-level: 63, builder: edwin)

Any thoughts on this, anyone? Any assistance offered would be most appreciated. Smile

Posted: Sat May 12, 2012 1:19 am

I'm sorry. These forums are devoted to ClamWin. I believe there is a Clam AV forum. Try a search on Google.

Regards,

Posted: Sat May 12, 2012 10:35 pm

suaswe wrote:

Any thoughts on this, anyone?

Looks like a mirror problem. By the way, db.gb.clamav.net is an alias for db.uk.clamav.net (actually three servers in United Kingdom and one in Ireland). You may try to fix this in the freshclam.conf file (depending on your current location).

Posted: Mon May 14, 2012 10:14 am

GuitarBob: as per my original post, I had searched for a general (and current) ClamAV forum relating to Linux and not found one, hence posting here, hoping someone might have a link to one if nothing else. Smile

I have tried a few different mirror configs in freshclam.conf and not had much joy; will keep looking around, thanks!

Posted: Tue May 15, 2012 10:02 pm

Here is a link to some Clam AV forum queries: https://ubuntuforums.org/tags.php?tag=clamav on the web.

Here is a link to another one: https://old.nabble.com/ClamAV-f16462.html on the web. I see one of the Clam AV sigmakers has some posts here.

You might also visit the Clam AV web site at https://www.clamav.net/lang/en/ on the web. You might also email one of the Clam AV contacts mentoned and ask for information about any Clam AV forums.

Regards,

Posted: Sat May 19, 2012 2:49 pm

Hello again suaswe,

According to NovoSial, freshclam errors like the following indicate some sort of HTTP problem.

Code:

# freshclam --debug
ClamAV update process started at Thu Mar 10 11:27:10 2005
main.cvd is up to date (version: 30, sigs: 31086, f-level: 4, builder: tkojm)
Downloading daily.cvd [*]
LibClamAV debug: Can't read CVD head from stream
ERROR: Verification: Broken or not a CVD file

Incidentally googling "ERROR: Verification: Broken or not a CVD file" gives interesting results.