[clamav-users] Unable to download database

Gene Heskett gheskett at shentel.net
Thu Aug 24 10:49:45 UTC 2017 

On Thursday 24 August 2017 04:11:55 Simon Mousey Smith wrote:

> Hi All
>
> Still having issue here in UK Liverpool
>
> WARNING: getfile: daily.cvd not found on database.clamav.net (IP:
> 193.1.193.64)
>
> Regards
>
> Simon
>
> Sent from my iPhone

I'm having trouble with a couple sites in the last few hours too:

Wed Aug 23 03:10:11 2017 -> main.cld is up to date (version: 58, sigs: 
4566249, f-level: 60, builder: sigmgr)
Wed Aug 23 03:10:31 2017 -> WARNING: getfile: daily-23700.cdiff not found 
on db.us.clamav.net (IP: 204.130.133.50)
Wed Aug 23 03:10:31 2017 -> WARNING: getpatch: Can't download 
daily-23700.cdiff from db.us.clamav.net
Wed Aug 23 03:10:33 2017 -> WARNING: getfile: daily-23700.cdiff not found 
on db.us.clamav.net (IP: 194.8.197.22)
Wed Aug 23 03:10:34 2017 -> WARNING: getpatch: Can't download 
daily-23700.cdiff from db.us.clamav.net
Wed Aug 23 03:10:34 2017 -> Trying host db.us.clamav.net 
(69.163.100.14)...
Wed Aug 23 03:11:04 2017 -> nonblock_connect: connect timing out (30 
secs)
Wed Aug 23 03:11:04 2017 -> Can't connect to port 80 of host 
db.us.clamav.net (IP: 69.163.100.14)
Wed Aug 23 03:11:04 2017 -> Trying host db.us.clamav.net 
(200.236.31.1)...
Wed Aug 23 03:11:10 2017 -> WARNING: getfile: daily-23700.cdiff not found 
on db.us.clamav.net (IP: 200.236.31.1)
Wed Aug 23 03:11:10 2017 -> WARNING: getpatch: Can't download 
daily-23700.cdiff from db.us.clamav.net
Wed Aug 23 03:11:40 2017 -> nonblock_connect: connect timing out (30 
secs)
Wed Aug 23 03:11:40 2017 -> Can't connect to port 80 of host 
db.us.clamav.net (IP: 69.12.162.28)
Wed Aug 23 03:11:40 2017 -> Trying host db.us.clamav.net 
(64.6.100.177)...
Wed Aug 23 03:12:10 2017 -> nonblock_connect: connect timing out (30 
secs)
Wed Aug 23 03:12:10 2017 -> Can't connect to port 80 of host 
db.us.clamav.net (IP: 64.6.100.177)
Wed Aug 23 03:12:10 2017 -> Trying host db.us.clamav.net 
(150.214.142.197)...
Wed Aug 23 03:12:40 2017 -> nonblock_recv: recv timing out (30 secs)
Wed Aug 23 03:12:40 2017 -> WARNING: getfile: Error while reading 
database from db.us.clamav.net (IP: 150.214.142.197): Operation now in 
progress
Wed Aug 23 03:12:40 2017 -> WARNING: getpatch: Can't download 
daily-23700.cdiff from db.us.clamav.net
Wed Aug 23 03:12:40 2017 -> Trying host db.us.clamav.net 
(194.186.47.19)...
Wed Aug 23 03:13:38 2017 -> nonblock_recv: recv timing out (30 secs)
Wed Aug 23 03:13:38 2017 -> WARNING: getfile: Error while reading 
database from db.us.clamav.net (IP: 194.186.47.19): Operation now in 
progress
Wed Aug 23 03:13:38 2017 -> WARNING: getpatch: Can't download 
daily-23700.cdiff from db.us.clamav.net
Wed Aug 23 03:13:38 2017 -> WARNING: Incremental update failed, trying to 
download daily.cvd
Wed Aug 23 03:14:08 2017 -> nonblock_connect: connect timing out (30 
secs)
Wed Aug 23 03:14:08 2017 -> Can't connect to port 80 of host 
db.us.clamav.net (IP: 204.130.133.50)
Wed Aug 23 03:14:38 2017 -> nonblock_connect: connect timing out (30 
secs)
Wed Aug 23 03:14:38 2017 -> Can't connect to port 80 of host 
db.us.clamav.net (IP: 207.57.106.31)
Wed Aug 23 03:14:38 2017 -> Trying host db.us.clamav.net 
(69.12.162.28)...
Wed Aug 23 03:15:08 2017 -> nonblock_connect: connect timing out (30 
secs)
Wed Aug 23 03:15:08 2017 -> Can't connect to port 80 of host 
db.us.clamav.net (IP: 69.12.162.28)
Wed Aug 23 03:15:08 2017 -> Trying host db.us.clamav.net 
(64.6.100.177)...
Wed Aug 23 03:15:38 2017 -> nonblock_connect: connect timing out (30 
secs)
Wed Aug 23 03:15:38 2017 -> Can't connect to port 80 of host 
db.us.clamav.net (IP: 64.6.100.177)
Wed Aug 23 03:15:38 2017 -> Trying host db.us.clamav.net (64.22.33.90)...
Wed Aug 23 03:16:08 2017 -> nonblock_connect: connect timing out (30 
secs)
Wed Aug 23 03:16:08 2017 -> Can't connect to port 80 of host 
db.us.clamav.net (IP: 64.22.33.90)
Wed Aug 23 03:16:08 2017 -> Trying host db.us.clamav.net 
(200.236.31.1)...
Wed Aug 23 03:29:28 2017 -> Downloading daily.cvd [100%]
Wed Aug 23 03:29:29 2017 -> ERROR: Verification: Can't verify database 
integrity
Wed Aug 23 03:29:29 2017 -> Trying again in 5 secs...
Wed Aug 23 03:29:34 2017 -> ClamAV update process started at Wed Aug 23 
03:29:34 2017
Wed Aug 23 03:29:34 2017 -> main.cld is up to date (version: 58, sigs: 
4566249, f-level: 60, builder: sigmgr)
Wed Aug 23 03:29:36 2017 -> Trying host db.us.clamav.net 
(198.148.78.4)...
Wed Aug 23 03:29:36 2017 -> Downloading daily-23700.cdiff [100%]
Wed Aug 23 03:29:43 2017 -> daily.cld updated (version: 23700, sigs: 
1742494, f-level: 63, builder: neo)
Wed Aug 23 03:29:43 2017 -> bytecode.cld is up to date (version: 309, 
sigs: 69, f-level: 63, builder: bbaker)
Wed Aug 23 03:29:49 2017 -> Database updated (6308812 signatures) from 
db.us.clamav.net (IP: 198.148.78.4)
Wed Aug 23 03:29:49 2017 -> Clamd successfully notified about the update.
Wed Aug 23 03:29:49 2017 -> --------------------------------------
Wed Aug 23 09:29:49 2017 -> Received signal: wake up
Wed Aug 23 09:29:49 2017 -> ClamAV update process started at Wed Aug 23 
09:29:49 2017
Wed Aug 23 09:29:49 2017 -> main.cld is up to date (version: 58, sigs: 
4566249, f-level: 60, builder: sigmgr)
Wed Aug 23 09:30:01 2017 -> WARNING: getfile: daily-23701.cdiff not found 
on db.us.clamav.net (IP: 204.130.133.50)
Wed Aug 23 09:30:01 2017 -> WARNING: getpatch: Can't download 
daily-23701.cdiff from db.us.clamav.net
Wed Aug 23 09:30:01 2017 -> Trying host db.us.clamav.net 
(64.6.100.177)...
Wed Aug 23 09:30:31 2017 -> nonblock_connect: connect timing out (30 
secs)
Wed Aug 23 09:30:31 2017 -> Can't connect to port 80 of host 
db.us.clamav.net (IP: 64.6.100.177)
Wed Aug 23 09:30:31 2017 -> Trying host db.us.clamav.net 
(168.143.19.95)...
Wed Aug 23 09:31:01 2017 -> nonblock_connect: connect timing out (30 
secs)
Wed Aug 23 09:31:01 2017 -> Can't connect to port 80 of host 
db.us.clamav.net (IP: 168.143.19.95)
Wed Aug 23 09:31:01 2017 -> Trying host db.us.clamav.net 
(69.12.162.28)...
Wed Aug 23 09:31:01 2017 -> WARNING: getfile: daily-23701.cdiff not found 
on db.us.clamav.net (IP: 69.12.162.28)
Wed Aug 23 09:31:01 2017 -> WARNING: getpatch: Can't download 
daily-23701.cdiff from db.us.clamav.net
Wed Aug 23 09:31:01 2017 -> Trying host db.us.clamav.net 
(198.148.78.4)...
Wed Aug 23 09:31:01 2017 -> Downloading daily-23701.cdiff [100%]

It has worked since then, from
db.us.clamav.net (IP: 198.148.78.4)
db.us.clamav.net (IP: 69.12.162.28)
except daily-23703.cdiff not found on db.us.clamav.net (IP: 155.98.64.87)
db.us.clamav.net (IP: 200.236.31.1)
db.us.clamav.net (IP: 198.148.78.4)

Which should show a few more failing addresses.

> > On 24 Aug 2017, at 08:48, maxal <mn at sbg.at> wrote:
> >
> > hi,
> >
> > also some issues here on 193.1.193.64
> >
> > Thu Aug 24 09:40:07 2017 -> ERROR: getpatch: Can't download daily-
> > 23699.cdiff from database.clamav.net
> > Thu Aug 24 09:40:07 2017 -> WARNING: Incremental update failed,
> > trying to download daily.cvd
> > Thu Aug 24 09:40:07 2017 -> WARNING: getfile: daily.cvd not found on
> > database.clamav.net (IP: 193.1.193.64)
> >
> > http://193.1.193.64/daily-23699.cdiff --header
> > "Host:database.clamav.net"
> > --2017-08-24 09:42:00--  http://193.1.193.64/daily-23699.cdiff
> > Connecting to 193.1.193.64:80... connected.
> > HTTP request sent, awaiting response... 404 Not Found
> > 2017-08-24 09:42:00 ERROR 404: Not Found.
> >
> > inetnum:        193.1.193.0 - 193.1.193.127
> > org:            ORG-HA8-RIPE
> > netname:        HEANET-MIRROR
> > country:        IE
> >
> > regards
> > max
> >
> >> On Thu, 2017-08-24 at 09:21 +0200, lukn555 wrote:
> >> Thank you for your effort, Joel.
> >>
> >> I still have issues with the following server from
> >> db.centraleu.clamav.net group:
> >>
> >> $ wget http://193.230.240.8/daily-23697.cdiff --header
> >> "Host:database.clamav.net"
> >> --2017-08-24 09:02:01--  http://193.230.240.8/daily-23697.cdiff
> >> Connecting to 193.230.240.8:80... connected.
> >> HTTP request sent, awaiting response... 403 Forbidden
> >> 2017-08-24 09:02:01 ERROR 403: Forbidden.
> >>
> >>> On 23.08.2017 23:21, Joel Esler (jesler) wrote:
> >>> All — I sent a note earlier, but this should be fixed/recovering
> >>> now.  We are working on an idea that may prevent this kind of
> >>> thing from happening in the future.
> >>>
> >>> Dennis — If you do a health check, and you find things that are…
> >>> not matching up with our results… please let me know your failure
> >>> list?
> >>>
> >>>
> >>> --
> >>> Joel Esler | Talos: Manager |
> >>> jesler at cisco.com<mailto:jesler at cisco. com>
> >>>
> >>>
> >>>
> >>>
> >>>
> >>>
> >>> On Aug 23, 2017, at 3:16 PM, Dennis Peterson
> >>> <dennispe at inetnw.com<m ailto:dennispe at inetnw.com>> wrote:
> >>>
> >>> After testing several of the DNS round robin aliases I found the
> >>> db.ca.clamav.net<http://db.ca.clamav.net> had the most reliable
> >>> server set for North America. After editing the freshclam.conf
> >>> file the files updated on the next cron.hourly cycle.
> >>>
> >>> I also found that the number of viable mirror sites is a small
> >>> portion of the total number of mirrors. I also found that a lot of
> >>> "local" mirrors are not all that local.
> >>>
> >>> I think I'll run a health check of every mirror in the western
> >>> hemisphere and use the results in a local DNS round robin running
> >>> my own servers. It is a form of dynamic load balancing using real-
> >>> time network response time. If nothing else it will stop most if
> >>> not all attempts to missing mirrors which seem to be the majority.
> >>> Obviously it will also ignore mirrors that disallow icmp traffic.
> >>>
> >>> dp
> >>>
> >>> On 8/23/17 9:48 AM, Dennis Peterson wrote:
> >>> nslookup db.local.clamav.net<http://db.local.clamav.net> |awk
> >>> '/Address:/ {print $2}' |xargs -L1 ping -c 1
> >>>
> >>> nslookup db.us.clamav.net<http://db.us.clamav.net> |awk
> >>> '/Address:/ {print $2}' |xargs -L1 ping -c 1
> >>>
> >>> nslookup db.ca.clamav.net<http://db.ca.clamav.net> |awk
> >>> '/Address:/ {print $2}' |xargs -L1 ping -c 1
> >>>
> >>> nslookup db.ru.clamav.net<http://db.ru.clamav.net> |awk
> >>> '/Address:/ {print $2}' |xargs -L1 ping -c 1
> >>>
> >>> nslookup db.uk.clamav.net<http://db.uk.clamav.net> |awk
> >>> '/Address:/ {print $2}' |xargs -L1 ping -c 1
> >>>
> >>>
> >>> Nobody home.
> >>>
> >>> dp
> >>>
> >>> On 8/23/17 12:26 AM, lukn555 wrote:
> >>> Good Day ClamAV List
> >>>
> >>> Since yesterday at around noon CET I've been having issues
> >>> downloading
> >>> the ClamAV database:
> >>>
> >>> freshclam --version
> >>> ClamAV 0.99.2/23696/Tue Aug 22 14:36:14 2017
> >>>
> >>>
> >>> # /usr/local/bin/freshclam --verbose
> >>> Current working dir is /usr/local/share/clamav
> >>> Max retries == 3
> >>> ClamAV update process started at Wed Aug 23 09:11:52 2017
> >>> Using IPv6 aware code
> >>> Querying current.cvd.clamav.net<http://current.cvd.clamav.net>
> >>> TTL: 609
> >>> Software version from DNS: 0.99.2
> >>> main.cvd version from DNS: 58
> >>> main.cld is up to date (version: 58, sigs: 4566249, f-level: 60,
> >>> builder: sigmgr)
> >>> daily.cvd version from DNS: 23700
> >>> Retrieving http://database.clamav.net/daily-23697.cdiff
> >>> Ignoring mirror 130.59.113.36 (due to previous errors)
> >>> Ignoring mirror 193.230.240.8 (due to previous errors)
> >>> Ignoring mirror 130.59.113.36 (due to previous errors)
> >>> Ignoring mirror 193.230.240.8 (due to previous errors)
> >>> WARNING: getpatch: Can't download daily-23697.cdiff from
> >>> database.clamav.net<http://database.clamav.net>
> >>> Retrieving http://database.clamav.net/daily-23697.cdiff
> >>> Ignoring mirror 130.59.113.36 (due to previous errors)
> >>> Ignoring mirror 193.230.240.8 (due to previous errors)
> >>> WARNING: getpatch: Can't download daily-23697.cdiff from
> >>> database.clamav.net<http://database.clamav.net>
> >>> Retrieving http://database.clamav.net/daily-23697.cdiff
> >>> Ignoring mirror 193.230.240.8 (due to previous errors)
> >>> Ignoring mirror 130.59.113.36 (due to previous errors)
> >>> WARNING: getpatch: Can't download daily-23697.cdiff from
> >>> database.clamav.net<http://database.clamav.net>
> >>> WARNING: Incremental update failed, trying to download daily.cvd
> >>> Whitelisting short-term blacklisted mirrors
> >>> Retrieving http://database.clamav.net/daily.cvd
> >>> Ignoring mirror 130.59.113.36 (due to previous errors)
> >>> Ignoring mirror 193.230.240.8 (due to previous errors)
> >>> Ignoring mirror 130.59.113.36 (due to previous errors)
> >>> Ignoring mirror 193.230.240.8 (due to previous errors)
> >>> WARNING: Can't download daily.cvd from
> >>> database.clamav.net<http://d atabase.clamav.net>
> >>> Trying again in 5 secs...
> >>>
> >>>
> >>> # dig database.clamav.net<http://database.clamav.net> +short
> >>> db.local.clamav.net<http://db.local.clamav.net>.
> >>> db.centraleu.clamav.net<http://db.centraleu.clamav.net>.
> >>> 130.59.113.36
> >>> 193.230.240.8
> >>>
> >>>
> >>> # wget http://database.clamav.net/daily-23697.cdiff
> >>> --2017-08-23 09:14:16--
> >>> http://database.clamav.net/daily-23697.cdif f
> >>> Resolving database.clamav.net<http://database.clamav.net>
> >>> (database.clamav.net<http://database.clamav.net>)...
> >>> 193.230.240.8, 130.59.113.36
> >>> Connecting to database.clamav.net<http://database.clamav.net>
> >>> (database.clamav.net<http://database.clamav.net>)|193.230.240.8|:8
> >>>0 ... connected.
> >>> HTTP request sent, awaiting response... 403 Forbidden
> >>> 2017-08-23 09:14:16 ERROR 403: Forbidden.
> >>>
> >>>
> >>> Is this an issue on my side or on ClamAV mirror side?
> >>> Any help is appreciated.
> >>> _______________________________________________
> >>> clamav-users mailing list
> >>> clamav-users at lists.clamav.net<mailto:clamav-users at lists.clamav.net
> >>>> http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
> >>>
> >>>
> >>> Help us build a comprehensive ClamAV guide:
> >>> https://github.com/vrtadmin/clamav-faq
> >>>
> >>> http://www.clamav.net/contact.html#ml
> >>>
> >>>
> >>> _______________________________________________
> >>> clamav-users mailing list
> >>> clamav-users at lists.clamav.net<mailto:clamav-users at lists.clamav.net
> >>>> http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
> >>>
> >>>
> >>> Help us build a comprehensive ClamAV guide:
> >>> https://github.com/vrtadmin/clamav-faq
> >>>
> >>> http://www.clamav.net/contact.html#ml
> >>>
> >>>
> >>> _______________________________________________
> >>> clamav-users mailing list
> >>> clamav-users at lists.clamav.net<mailto:clamav-users at lists.clamav.net
> >>>> http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
> >>>
> >>>
> >>> Help us build a comprehensive ClamAV guide:
> >>> https://github.com/vrtadmin/clamav-faq
> >>>
> >>> http://www.clamav.net/contact.html#ml
> >>>
> >>> _______________________________________________
> >>> clamav-users mailing list
> >>> clamav-users at lists.clamav.net
> >>> http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
> >>>
> >>>
> >>> Help us build a comprehensive ClamAV guide:
> >>> https://github.com/vrtadmin/clamav-faq
> >>>
> >>> http://www.clamav.net/contact.html#ml
> >>
> >> _______________________________________________
> >> clamav-users mailing list
> >> clamav-users at lists.clamav.net
> >> http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
> >>
> >>
> >> Help us build a comprehensive ClamAV guide:
> >> https://github.com/vrtadmin/clamav-faq
> >>
> >> http://www.clamav.net/contact.html#ml
> >
> > _______________________________________________
> > clamav-users mailing list
> > clamav-users at lists.clamav.net
> > http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
> >
> >
> > Help us build a comprehensive ClamAV guide:
> > https://github.com/vrtadmin/clamav-faq
> >
> > http://www.clamav.net/contact.html#ml
>
> _______________________________________________
> clamav-users mailing list
> clamav-users at lists.clamav.net
> http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
>
>
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
>
> http://www.clamav.net/contact.html#ml


Cheers, Gene Heskett
-- 
"There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author)
Genes Web page <http://geneslinuxbox.net:6309/gene>

More information about the clamav-users mailing list