Login | Register For Free | Help
Search for: (Advanced)

Mailing List Archive: ClamAV: users

CentOS 5 freshclam / main.cld broken

 

 

ClamAV users RSS feed   Index | Next | Previous | View Threaded


tcooper at ucsd

Jun 28, 2012, 11:05 AM

Post #1 of 2 (662 views)
Permalink
CentOS 5 freshclam / main.cld broken

Recently we've been getting failures from freshclam of the following type reported in Logwatch...

/etc/cron.daily/freshclam:

ERROR: Corrupted database file /var/clamav/main.cld: Broken or not a CVD file

Since we install/reinstall with a 'scorch-the-earth' script I did so on my machine and found
'similar' errors during freshclam after reinstall. Here is an excerpt from the install/reinstall
script output...

...
# Installing clamav clamav-db clamd clamtk and dependencies...
Installed:
clamav.x86_64 0:0.97.5-2.el5.rf clamav-db.x86_64 0:0.97.5-2.el5.rf clamd.x86_64 0:0.97.5-2.el5.rf
clamtk.noarch 0:4.25-1.el5.rf

Complete!
# Updating the clamav signatures...
ClamAV update process started at Thu Jun 28 10:52:23 2012
main.cvd is up to date (version: 54, sigs: 1044387, f-level: 60, builder: sven)
Downloading daily-15077.cdiff [100%]
...
Downloading daily-15096.cdiff [100%]
daily.cld updated (version: 15096, sigs: 224069, f-level: 63, builder: ccordes)
Downloading bytecode.cvd [100%]
bytecode.cvd updated (version: 185, sigs: 39, f-level: 63, builder: neo)
WARNING: [LibClamAV] cli_cvdverify: Can't read CVD header
ERROR: Corrupted database file /var/clamav/main.cld: Broken or not a CVD file
Corrupted database file renamed to /var/clamav/main.cld.broken
Trying again in 5 secs...
ClamAV update process started at Thu Jun 28 10:52:34 2012
main.cvd is up to date (version: 54, sigs: 1044387, f-level: 60, builder: sven)
daily.cld is up to date (version: 15096, sigs: 224069, f-level: 63, builder: ccordes)
bytecode.cvd is up to date (version: 185, sigs: 39, f-level: 63, builder: neo)
# Making the clamav signature db readable by users...
# Starting clamd...
Starting Clam AntiVirus Daemon: [ OK ]
Testing the installation...
ClamAV 0.97.5/15096/Thu Jun 28 09:21:19 2012
/admin/software/clamav/test/clam-petite.exe: ClamAV-Test-File FOUND
...
/admin/software/clamav/test/clam_ISmsi_ext.exe: ClamAV-Test-File FOUND

----------- SCAN SUMMARY -----------
Known viruses: 1263193
Engine version: 0.97.5
Scanned directories: 2
Scanned files: 141
Infected files: 47
Total errors: 1
Data scanned: 19.52 MB
Data read: 12.41 MB (ratio 1.57:1)
Time: 6.206 sec (0 m 6 s)
Installing clamscan_hourly...
Installing clamscan_daily...

Any thoughts?

Thanks,
Trevor

_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml


dave at hillcroft

Jun 28, 2012, 12:04 PM

Post #2 of 2 (632 views)
Permalink
Re: CentOS 5 freshclam / main.cld broken [In reply to]

In article <4FEC9CEF.7030601 [at] ucsd>,
Trevor Cooper <tcooper [at] ucsd> wrote:

> Recently we've been getting failures from freshclam of the following type
> reported in Logwatch...
>
> /etc/cron.daily/freshclam:
>
> ERROR: Corrupted database file /var/clamav/main.cld: Broken or not a CVD file
>
> Since we install/reinstall with a 'scorch-the-earth' script I did so on my
> machine and found
> 'similar' errors during freshclam after reinstall. Here is an excerpt from
> the install/reinstall
> script output...
>
> ...
> # Installing clamav clamav-db clamd clamtk and dependencies...
> Installed:
> clamav.x86_64 0:0.97.5-2.el5.rf clamav-db.x86_64 0:0.97.5-2.el5.rf
> clamd.x86_64 0:0.97.5-2.el5.rf
> clamtk.noarch 0:4.25-1.el5.rf

You are using the packages produced by Dag Wieers, so he's the person to
contact.

There is a packaging "error" in the latest version, if you do

# rpm -qlv clamav-db

you will see that there are zero-length .cld files installed, this is
what freshclam is whinging about. Freshclam will rename it and try
again, but as a side-effect you have to restart the daemon because the
zero-length files kill it as soon as the RPM install causes the restart!

Dave


--
Dave Hill - dave at hillcroft dot org dot uk

_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

ClamAV users RSS feed   Index | Next | Previous | View Threaded
 
 


Interested in having your list archived? Contact Gossamer Threads
 
  Web Applications & Managed Hosting Powered by Gossamer Threads Inc.