Hi All,

I have ClamWin installed on a couple of computers in my office. I would like to save the daily files(s) on my local network and have the workstations grab the local files instead of pulling them from the internet everyday. Is this possible?

Thanks,

Erik

Thank you for using ClamWin! ClamWin does not facilitate network use like this out-of-the-box, but I think you could do it with some scripts and make it a chron job from your server.

Regards,

Hi All,

sorry for reactivating this old topic, but I'm interested in exactly the same.
From the logfile it seems that the updater tries to find three files
main.cvd
daily.cvd
bytecode.cld

The first two can be manually downloaded e.g. from clamav.netcologne.de/main.cvd and clamav.netcologne.de/daily.cvd.
clamav.netcologne.de/bytecode.cld gives me an error, clamav.netcologne.de/bytecode.cvd works well.

Is it enough to download these three files regularly, place them on a webserver in the local network and adjust the "Download Site" setting in ClamWin according to the adress of the local webserver?

Any hints?


Thanks in advance!
Cheers -- Markus

I think that will work, Markus.

Regards,

Hi GuitarBob,
thanks for your answer.

But what's the difference between the bytecode.cld that's not found (but mentioned in the log) and the bytecode.cvd that I can download?

Also I've logged the internet accesses of the updater when it did its update this morning. It downloaded the following files:

daily-15543.cdiff
daily-15544.cdiff
daily-15545.cdiff
daily-15546.cdiff
daily-15547.cdiff

What about these files? Are they important or is it sufficient to have the three files mentioned in my previous post?


Cheers -- Markus

The ccdiff file contains the current update--the new definitions/changes. It actually does the updating and should then be removed automatically by the updating process. Once in a while, I see it still hangs around on my system. The main database is usually a cvd file. The bytecode and daily files can be either cld or cvd. If you have a cvd and a cld for the same file, delete one of them. Presently, my bytecode and daily files are cld, and the main file is cvd. See https://comments.gmane.org/gmane.comp.security.virus.clamav.user/35698 on the web. Make sure your scan work afterwards--at least the first time.

Regards,

Hi GuitarBob,

many thanks for the explanation and the link.

Putting it all together it means

- There are up to three files that might be updated (filenames main, daily and bytecode)
- Each of these has the extension .cvd in the beginning. As soon as it gets the first update the extension changes to .cld
- Updates are done with .cdiff-files which only carry the changes
- On the update servers one will always find either the .cvd or the .cld version of the three files mentioned above and in addition a .cdiff-file
- To have a server in LAN that holds the updates it's sufficient to download the .cvd or the .cld version of each file regularly and put it on the local server.
- If a .cld exists the corresponding .cvd must be ignored / deleted. In this scenario the .cdiff can be ignored completely.
- The Download Site setting in ClamWin has to be adjusted to point to the local server.

Can you / anybody confirm that I've got this correctly?

Thanks for your time!
Cheers -- Markus

Markus, I think you have got it right, but if I've told you anything wrong, alch (developer) will take a look at this thread and correct me. ClamWin wasn't really designed for network use, and network users do not do any beta testing--they just tell us when something does not work for them!

Regards,

It should work, however ClamAV uses TXT DNS records to determine if there is an update. If it can't find those it will always download an update.