[clamav-users] Problems with daily db?

[Rafael Ferreira]

Odd, we run Debian (Jessie) Linux and we see this problem on quite a few of our hosts; nothing obviously relevant seems to have changed on our side. We will keep looking and report back.

> On Oct 15, 2015, at 1:15 PM, Steven Morgan <smorgan at sourcefire.com> wrote:
> 
> Thanks, that is working for me with ClamAV 0.98.7. It even worked using
> http://scanii-assets.s3.amazonaws.com/daily.cvd. What OS and hardware are
> you using?
> 
> On Thu, Oct 15, 2015 at 1:30 PM, Rafael Ferreira <raf at uvasoftware.com>
> wrote:
> 
>> 0.98.7
>> 
>>>> On Oct 15, 2015, at 8:46 AM, Steven Morgan <smorgan at sourcefire.com>
>>> wrote:
>>> 
>>> Rafael,
>>> 
>>> I don't see this. Which version of ClamAV are you using?
>>> 
>>> Steve
>>> 
>>> 
>>> On Thu, Oct 15, 2015 at 11:24 AM, Rafael Ferreira <raf at uvasoftware.com>
>>> wrote:
>>> 
>>>> Howdy folks, we started noticing problems with daily.cvd:
>>>> 
>>>> Retrieving http://scanii-assets.s3.amazonaws.com/daily.cvd
>>>> 
>>>> Trying to download http://scanii-assets.s3.amazonaws.com/daily.cvd (IP:
>>>> 54.231.34.41)
>>>> 
>>>> Downloading daily.cvd [100%]
>>>> 
>>>> Loading signatures from daily.cvd
>>>> 
>>>> WARNING: [LibClamAV] cli_parseadd(): Problem adding signature (1b).
>>>> 
>>>> WARNING: [LibClamAV] Problem parsing database at line 1097
>>>> 
>>>> WARNING: [LibClamAV] Can't load daily.ldb: Malformed database
>>>> 
>>>> WARNING: [LibClamAV] cli_tgzload: Can't load daily.ldb
>>>> 
>>>> WARNING: [LibClamAV] Can't load
>> /var/lib/clamav/clamav-bde1e525a5ccd73f8aef9d297171cfdc.tmp/clamav-d1391230fbba45ed1a1ab05e2a069102.cvd:
>>>> Malformed database
>>>> 
>>>> ERROR: Failed to load new database: Malformed database
>>>> 
>>>> ERROR: During database load : WARNING: [LibClamAV] cli_parse_add():
>> Problem
>>>> adding signature (1). [...] ERROR: Failed to load new database:
>> Malformed
>>>> database
>>>> 
>>>> WARNING: Database load exited with status 55
>>>> 
>>>> ERROR: Failed to load new database
>>>> 
>>>> couple of things worth noting, there's no indication of memory pressure
>> on
>>>> the hosts, the databases do pass a sigtool dump of its contents and were
>>>> tested for potential in flight corruption.
>>>> 
>>>> Anyone else seeing this?
>>>> 
>>>> - Rafael
>>>> _______________________________________________
>>>> Help us build a comprehensive ClamAV guide:
>>>> https://github.com/vrtadmin/clamav-faq
>>>> 
>>>> http://www.clamav.net/contact.html#ml
>>> _______________________________________________
>>> Help us build a comprehensive ClamAV guide:
>>> https://github.com/vrtadmin/clamav-faq
>>> 
>>> http://www.clamav.net/contact.html#ml
>> _______________________________________________
>> Help us build a comprehensive ClamAV guide:
>> https://github.com/vrtadmin/clamav-faq
>> 
>> http://www.clamav.net/contact.html#ml
> _______________________________________________
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
> 
> http://www.clamav.net/contact.html#ml