[clamav-users] Unable to download database

Simon Mousey Smith simonsmith5521 at gmail.com
Thu Aug 24 10:57:26 UTC 2017 

Managed to get it working again from a user who helped 

Toss your /usr/lib/clamav/mirrors.dat file to eliminate the Ignoring mirror messages.

And then seemed to start working again

Simon

Sent from my iPhone

> On 24 Aug 2017, at 11:49, Gene Heskett <gheskett at shentel.net> wrote:
> 
>> On Thursday 24 August 2017 04:11:55 Simon Mousey Smith wrote:
>> 
>> Hi All
>> 
>> Still having issue here in UK Liverpool
>> 
>> WARNING: getfile: daily.cvd not found on database.clamav.net (IP:
>> 193.1.193.64)
>> 
>> Regards
>> 
>> Simon
>> 
>> Sent from my iPhone
> 
> I'm having trouble with a couple sites in the last few hours too:
> 
> Wed Aug 23 03:10:11 2017 -> main.cld is up to date (version: 58, sigs: 
> 4566249, f-level: 60, builder: sigmgr)
> Wed Aug 23 03:10:31 2017 -> WARNING: getfile: daily-23700.cdiff not found 
> on db.us.clamav.net (IP: 204.130.133.50)
> Wed Aug 23 03:10:31 2017 -> WARNING: getpatch: Can't download 
> daily-23700.cdiff from db.us.clamav.net
> Wed Aug 23 03:10:33 2017 -> WARNING: getfile: daily-23700.cdiff not found 
> on db.us.clamav.net (IP: 194.8.197.22)
> Wed Aug 23 03:10:34 2017 -> WARNING: getpatch: Can't download 
> daily-23700.cdiff from db.us.clamav.net
> Wed Aug 23 03:10:34 2017 -> Trying host db.us.clamav.net 
> (69.163.100.14)...
> Wed Aug 23 03:11:04 2017 -> nonblock_connect: connect timing out (30 
> secs)
> Wed Aug 23 03:11:04 2017 -> Can't connect to port 80 of host 
> db.us.clamav.net (IP: 69.163.100.14)
> Wed Aug 23 03:11:04 2017 -> Trying host db.us.clamav.net 
> (200.236.31.1)...
> Wed Aug 23 03:11:10 2017 -> WARNING: getfile: daily-23700.cdiff not found 
> on db.us.clamav.net (IP: 200.236.31.1)
> Wed Aug 23 03:11:10 2017 -> WARNING: getpatch: Can't download 
> daily-23700.cdiff from db.us.clamav.net
> Wed Aug 23 03:11:40 2017 -> nonblock_connect: connect timing out (30 
> secs)
> Wed Aug 23 03:11:40 2017 -> Can't connect to port 80 of host 
> db.us.clamav.net (IP: 69.12.162.28)
> Wed Aug 23 03:11:40 2017 -> Trying host db.us.clamav.net 
> (64.6.100.177)...
> Wed Aug 23 03:12:10 2017 -> nonblock_connect: connect timing out (30 
> secs)
> Wed Aug 23 03:12:10 2017 -> Can't connect to port 80 of host 
> db.us.clamav.net (IP: 64.6.100.177)
> Wed Aug 23 03:12:10 2017 -> Trying host db.us.clamav.net 
> (150.214.142.197)...
> Wed Aug 23 03:12:40 2017 -> nonblock_recv: recv timing out (30 secs)
> Wed Aug 23 03:12:40 2017 -> WARNING: getfile: Error while reading 
> database from db.us.clamav.net (IP: 150.214.142.197): Operation now in 
> progress
> Wed Aug 23 03:12:40 2017 -> WARNING: getpatch: Can't download 
> daily-23700.cdiff from db.us.clamav.net
> Wed Aug 23 03:12:40 2017 -> Trying host db.us.clamav.net 
> (194.186.47.19)...
> Wed Aug 23 03:13:38 2017 -> nonblock_recv: recv timing out (30 secs)
> Wed Aug 23 03:13:38 2017 -> WARNING: getfile: Error while reading 
> database from db.us.clamav.net (IP: 194.186.47.19): Operation now in 
> progress
> Wed Aug 23 03:13:38 2017 -> WARNING: getpatch: Can't download 
> daily-23700.cdiff from db.us.clamav.net
> Wed Aug 23 03:13:38 2017 -> WARNING: Incremental update failed, trying to 
> download daily.cvd
> Wed Aug 23 03:14:08 2017 -> nonblock_connect: connect timing out (30 
> secs)
> Wed Aug 23 03:14:08 2017 -> Can't connect to port 80 of host 
> db.us.clamav.net (IP: 204.130.133.50)
> Wed Aug 23 03:14:38 2017 -> nonblock_connect: connect timing out (30 
> secs)
> Wed Aug 23 03:14:38 2017 -> Can't connect to port 80 of host 
> db.us.clamav.net (IP: 207.57.106.31)
> Wed Aug 23 03:14:38 2017 -> Trying host db.us.clamav.net 
> (69.12.162.28)...
> Wed Aug 23 03:15:08 2017 -> nonblock_connect: connect timing out (30 
> secs)
> Wed Aug 23 03:15:08 2017 -> Can't connect to port 80 of host 
> db.us.clamav.net (IP: 69.12.162.28)
> Wed Aug 23 03:15:08 2017 -> Trying host db.us.clamav.net 
> (64.6.100.177)...
> Wed Aug 23 03:15:38 2017 -> nonblock_connect: connect timing out (30 
> secs)
> Wed Aug 23 03:15:38 2017 -> Can't connect to port 80 of host 
> db.us.clamav.net (IP: 64.6.100.177)
> Wed Aug 23 03:15:38 2017 -> Trying host db.us.clamav.net (64.22.33.90)...
> Wed Aug 23 03:16:08 2017 -> nonblock_connect: connect timing out (30 
> secs)
> Wed Aug 23 03:16:08 2017 -> Can't connect to port 80 of host 
> db.us.clamav.net (IP: 64.22.33.90)
> Wed Aug 23 03:16:08 2017 -> Trying host db.us.clamav.net 
> (200.236.31.1)...
> Wed Aug 23 03:29:28 2017 -> Downloading daily.cvd [100%]
> Wed Aug 23 03:29:29 2017 -> ERROR: Verification: Can't verify database 
> integrity
> Wed Aug 23 03:29:29 2017 -> Trying again in 5 secs...
> Wed Aug 23 03:29:34 2017 -> ClamAV update process started at Wed Aug 23 
> 03:29:34 2017
> Wed Aug 23 03:29:34 2017 -> main.cld is up to date (version: 58, sigs: 
> 4566249, f-level: 60, builder: sigmgr)
> Wed Aug 23 03:29:36 2017 -> Trying host db.us.clamav.net 
> (198.148.78.4)...
> Wed Aug 23 03:29:36 2017 -> Downloading daily-23700.cdiff [100%]
> Wed Aug 23 03:29:43 2017 -> daily.cld updated (version: 23700, sigs: 
> 1742494, f-level: 63, builder: neo)
> Wed Aug 23 03:29:43 2017 -> bytecode.cld is up to date (version: 309, 
> sigs: 69, f-level: 63, builder: bbaker)
> Wed Aug 23 03:29:49 2017 -> Database updated (6308812 signatures) from 
> db.us.clamav.net (IP: 198.148.78.4)
> Wed Aug 23 03:29:49 2017 -> Clamd successfully notified about the update.
> Wed Aug 23 03:29:49 2017 -> --------------------------------------
> Wed Aug 23 09:29:49 2017 -> Received signal: wake up
> Wed Aug 23 09:29:49 2017 -> ClamAV update process started at Wed Aug 23 
> 09:29:49 2017
> Wed Aug 23 09:29:49 2017 -> main.cld is up to date (version: 58, sigs: 
> 4566249, f-level: 60, builder: sigmgr)
> Wed Aug 23 09:30:01 2017 -> WARNING: getfile: daily-23701.cdiff not found 
> on db.us.clamav.net (IP: 204.130.133.50)
> Wed Aug 23 09:30:01 2017 -> WARNING: getpatch: Can't download 
> daily-23701.cdiff from db.us.clamav.net
> Wed Aug 23 09:30:01 2017 -> Trying host db.us.clamav.net 
> (64.6.100.177)...
> Wed Aug 23 09:30:31 2017 -> nonblock_connect: connect timing out (30 
> secs)
> Wed Aug 23 09:30:31 2017 -> Can't connect to port 80 of host 
> db.us.clamav.net (IP: 64.6.100.177)
> Wed Aug 23 09:30:31 2017 -> Trying host db.us.clamav.net 
> (168.143.19.95)...
> Wed Aug 23 09:31:01 2017 -> nonblock_connect: connect timing out (30 
> secs)
> Wed Aug 23 09:31:01 2017 -> Can't connect to port 80 of host 
> db.us.clamav.net (IP: 168.143.19.95)
> Wed Aug 23 09:31:01 2017 -> Trying host db.us.clamav.net 
> (69.12.162.28)...
> Wed Aug 23 09:31:01 2017 -> WARNING: getfile: daily-23701.cdiff not found 
> on db.us.clamav.net (IP: 69.12.162.28)
> Wed Aug 23 09:31:01 2017 -> WARNING: getpatch: Can't download 
> daily-23701.cdiff from db.us.clamav.net
> Wed Aug 23 09:31:01 2017 -> Trying host db.us.clamav.net 
> (198.148.78.4)...
> Wed Aug 23 09:31:01 2017 -> Downloading daily-23701.cdiff [100%]
> 
> It has worked since then, from
> db.us.clamav.net (IP: 198.148.78.4)
> db.us.clamav.net (IP: 69.12.162.28)
> except daily-23703.cdiff not found on db.us.clamav.net (IP: 155.98.64.87)
> db.us.clamav.net (IP: 200.236.31.1)
> db.us.clamav.net (IP: 198.148.78.4)
> 
> Which should show a few more failing addresses.
> 
>>> On 24 Aug 2017, at 08:48, maxal <mn at sbg.at> wrote:
>>> 
>>> hi,
>>> 
>>> also some issues here on 193.1.193.64
>>> 
>>> Thu Aug 24 09:40:07 2017 -> ERROR: getpatch: Can't download daily-
>>> 23699.cdiff from database.clamav.net
>>> Thu Aug 24 09:40:07 2017 -> WARNING: Incremental update failed,
>>> trying to download daily.cvd
>>> Thu Aug 24 09:40:07 2017 -> WARNING: getfile: daily.cvd not found on
>>> database.clamav.net (IP: 193.1.193.64)
>>> 
>>> http://193.1.193.64/daily-23699.cdiff --header
>>> "Host:database.clamav.net"
>>> --2017-08-24 09:42:00--  http://193.1.193.64/daily-23699.cdiff
>>> Connecting to 193.1.193.64:80... connected.
>>> HTTP request sent, awaiting response... 404 Not Found
>>> 2017-08-24 09:42:00 ERROR 404: Not Found.
>>> 
>>> inetnum:        193.1.193.0 - 193.1.193.127
>>> org:            ORG-HA8-RIPE
>>> netname:        HEANET-MIRROR
>>> country:        IE
>>> 
>>> regards
>>> max
>>> 
>>>> On Thu, 2017-08-24 at 09:21 +0200, lukn555 wrote:
>>>> Thank you for your effort, Joel.
>>>> 
>>>> I still have issues with the following server from
>>>> db.centraleu.clamav.net group:
>>>> 
>>>> $ wget http://193.230.240.8/daily-23697.cdiff --header
>>>> "Host:database.clamav.net"
>>>> --2017-08-24 09:02:01--  http://193.230.240.8/daily-23697.cdiff
>>>> Connecting to 193.230.240.8:80... connected.
>>>> HTTP request sent, awaiting response... 403 Forbidden
>>>> 2017-08-24 09:02:01 ERROR 403: Forbidden.
>>>> 
>>>>> On 23.08.2017 23:21, Joel Esler (jesler) wrote:
>>>>> All — I sent a note earlier, but this should be fixed/recovering
>>>>> now.  We are working on an idea that may prevent this kind of
>>>>> thing from happening in the future.
>>>>> 
>>>>> Dennis — If you do a health check, and you find things that are…
>>>>> not matching up with our results… please let me know your failure
>>>>> list?
>>>>> 
>>>>> 
>>>>> --
>>>>> Joel Esler | Talos: Manager |
>>>>> jesler at cisco.com<mailto:jesler at cisco. com>
>>>>> 
>>>>> 
>>>>> 
>>>>> 
>>>>> 
>>>>> 
>>>>> On Aug 23, 2017, at 3:16 PM, Dennis Peterson
>>>>> <dennispe at inetnw.com<m ailto:dennispe at inetnw.com>> wrote:
>>>>> 
>>>>> After testing several of the DNS round robin aliases I found the
>>>>> db.ca.clamav.net<http://db.ca.clamav.net> had the most reliable
>>>>> server set for North America. After editing the freshclam.conf
>>>>> file the files updated on the next cron.hourly cycle.
>>>>> 
>>>>> I also found that the number of viable mirror sites is a small
>>>>> portion of the total number of mirrors. I also found that a lot of
>>>>> "local" mirrors are not all that local.
>>>>> 
>>>>> I think I'll run a health check of every mirror in the western
>>>>> hemisphere and use the results in a local DNS round robin running
>>>>> my own servers. It is a form of dynamic load balancing using real-
>>>>> time network response time. If nothing else it will stop most if
>>>>> not all attempts to missing mirrors which seem to be the majority.
>>>>> Obviously it will also ignore mirrors that disallow icmp traffic.
>>>>> 
>>>>> dp
>>>>> 
>>>>> On 8/23/17 9:48 AM, Dennis Peterson wrote:
>>>>> nslookup db.local.clamav.net<http://db.local.clamav.net> |awk
>>>>> '/Address:/ {print $2}' |xargs -L1 ping -c 1
>>>>> 
>>>>> nslookup db.us.clamav.net<http://db.us.clamav.net> |awk
>>>>> '/Address:/ {print $2}' |xargs -L1 ping -c 1
>>>>> 
>>>>> nslookup db.ca.clamav.net<http://db.ca.clamav.net> |awk
>>>>> '/Address:/ {print $2}' |xargs -L1 ping -c 1
>>>>> 
>>>>> nslookup db.ru.clamav.net<http://db.ru.clamav.net> |awk
>>>>> '/Address:/ {print $2}' |xargs -L1 ping -c 1
>>>>> 
>>>>> nslookup db.uk.clamav.net<http://db.uk.clamav.net> |awk
>>>>> '/Address:/ {print $2}' |xargs -L1 ping -c 1
>>>>> 
>>>>> 
>>>>> Nobody home.
>>>>> 
>>>>> dp
>>>>> 
>>>>> On 8/23/17 12:26 AM, lukn555 wrote:
>>>>> Good Day ClamAV List
>>>>> 
>>>>> Since yesterday at around noon CET I've been having issues
>>>>> downloading
>>>>> the ClamAV database:
>>>>> 
>>>>> freshclam --version
>>>>> ClamAV 0.99.2/23696/Tue Aug 22 14:36:14 2017
>>>>> 
>>>>> 
>>>>> # /usr/local/bin/freshclam --verbose
>>>>> Current working dir is /usr/local/share/clamav
>>>>> Max retries == 3
>>>>> ClamAV update process started at Wed Aug 23 09:11:52 2017
>>>>> Using IPv6 aware code
>>>>> Querying current.cvd.clamav.net<http://current.cvd.clamav.net>
>>>>> TTL: 609
>>>>> Software version from DNS: 0.99.2
>>>>> main.cvd version from DNS: 58
>>>>> main.cld is up to date (version: 58, sigs: 4566249, f-level: 60,
>>>>> builder: sigmgr)
>>>>> daily.cvd version from DNS: 23700
>>>>> Retrieving http://database.clamav.net/daily-23697.cdiff
>>>>> Ignoring mirror 130.59.113.36 (due to previous errors)
>>>>> Ignoring mirror 193.230.240.8 (due to previous errors)
>>>>> Ignoring mirror 130.59.113.36 (due to previous errors)
>>>>> Ignoring mirror 193.230.240.8 (due to previous errors)
>>>>> WARNING: getpatch: Can't download daily-23697.cdiff from
>>>>> database.clamav.net<http://database.clamav.net>
>>>>> Retrieving http://database.clamav.net/daily-23697.cdiff
>>>>> Ignoring mirror 130.59.113.36 (due to previous errors)
>>>>> Ignoring mirror 193.230.240.8 (due to previous errors)
>>>>> WARNING: getpatch: Can't download daily-23697.cdiff from
>>>>> database.clamav.net<http://database.clamav.net>
>>>>> Retrieving http://database.clamav.net/daily-23697.cdiff
>>>>> Ignoring mirror 193.230.240.8 (due to previous errors)
>>>>> Ignoring mirror 130.59.113.36 (due to previous errors)
>>>>> WARNING: getpatch: Can't download daily-23697.cdiff from
>>>>> database.clamav.net<http://database.clamav.net>
>>>>> WARNING: Incremental update failed, trying to download daily.cvd
>>>>> Whitelisting short-term blacklisted mirrors
>>>>> Retrieving http://database.clamav.net/daily.cvd
>>>>> Ignoring mirror 130.59.113.36 (due to previous errors)
>>>>> Ignoring mirror 193.230.240.8 (due to previous errors)
>>>>> Ignoring mirror 130.59.113.36 (due to previous errors)
>>>>> Ignoring mirror 193.230.240.8 (due to previous errors)
>>>>> WARNING: Can't download daily.cvd from
>>>>> database.clamav.net<http://d atabase.clamav.net>
>>>>> Trying again in 5 secs...
>>>>> 
>>>>> 
>>>>> # dig database.clamav.net<http://database.clamav.net> +short
>>>>> db.local.clamav.net<http://db.local.clamav.net>.
>>>>> db.centraleu.clamav.net<http://db.centraleu.clamav.net>.
>>>>> 130.59.113.36
>>>>> 193.230.240.8
>>>>> 
>>>>> 
>>>>> # wget http://database.clamav.net/daily-23697.cdiff
>>>>> --2017-08-23 09:14:16--
>>>>> http://database.clamav.net/daily-23697.cdif f
>>>>> Resolving database.clamav.net<http://database.clamav.net>
>>>>> (database.clamav.net<http://database.clamav.net>)...
>>>>> 193.230.240.8, 130.59.113.36
>>>>> Connecting to database.clamav.net<http://database.clamav.net>
>>>>> (database.clamav.net<http://database.clamav.net>)|193.230.240.8|:8
>>>>> 0 ... connected.
>>>>> HTTP request sent, awaiting response... 403 Forbidden
>>>>> 2017-08-23 09:14:16 ERROR 403: Forbidden.
>>>>> 
>>>>> 
>>>>> Is this an issue on my side or on ClamAV mirror side?
>>>>> Any help is appreciated.
>>>>> _______________________________________________
>>>>> clamav-users mailing list
>>>>> clamav-users at lists.clamav.net<mailto:clamav-users at lists.clamav.net
>>>>>> http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
>>>>> 
>>>>> 
>>>>> Help us build a comprehensive ClamAV guide:
>>>>> https://github.com/vrtadmin/clamav-faq
>>>>> 
>>>>> http://www.clamav.net/contact.html#ml
>>>>> 
>>>>> 
>>>>> _______________________________________________
>>>>> clamav-users mailing list
>>>>> clamav-users at lists.clamav.net<mailto:clamav-users at lists.clamav.net
>>>>>> http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
>>>>> 
>>>>> 
>>>>> Help us build a comprehensive ClamAV guide:
>>>>> https://github.com/vrtadmin/clamav-faq
>>>>> 
>>>>> http://www.clamav.net/contact.html#ml
>>>>> 
>>>>> 
>>>>> _______________________________________________
>>>>> clamav-users mailing list
>>>>> clamav-users at lists.clamav.net<mailto:clamav-users at lists.clamav.net
>>>>>> http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
>>>>> 
>>>>> 
>>>>> Help us build a comprehensive ClamAV guide:
>>>>> https://github.com/vrtadmin/clamav-faq
>>>>> 
>>>>> http://www.clamav.net/contact.html#ml
>>>>> 
>>>>> _______________________________________________
>>>>> clamav-users mailing list
>>>>> clamav-users at lists.clamav.net
>>>>> http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
>>>>> 
>>>>> 
>>>>> Help us build a comprehensive ClamAV guide:
>>>>> https://github.com/vrtadmin/clamav-faq
>>>>> 
>>>>> http://www.clamav.net/contact.html#ml
>>>> 
>>>> _______________________________________________
>>>> clamav-users mailing list
>>>> clamav-users at lists.clamav.net
>>>> http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
>>>> 
>>>> 
>>>> Help us build a comprehensive ClamAV guide:
>>>> https://github.com/vrtadmin/clamav-faq
>>>> 
>>>> http://www.clamav.net/contact.html#ml
>>> 
>>> _______________________________________________
>>> clamav-users mailing list
>>> clamav-users at lists.clamav.net
>>> http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
>>> 
>>> 
>>> Help us build a comprehensive ClamAV guide:
>>> https://github.com/vrtadmin/clamav-faq
>>> 
>>> http://www.clamav.net/contact.html#ml
>> 
>> _______________________________________________
>> clamav-users mailing list
>> clamav-users at lists.clamav.net
>> http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
>> 
>> 
>> Help us build a comprehensive ClamAV guide:
>> https://github.com/vrtadmin/clamav-faq
>> 
>> http://www.clamav.net/contact.html#ml
> 
> 
> Cheers, Gene Heskett
> -- 
> "There are four boxes to be used in defense of liberty:
> soap, ballot, jury, and ammo. Please use in that order."
> -Ed Howdershelt (Author)
> Genes Web page <http://geneslinuxbox.net:6309/gene>
> _______________________________________________
> clamav-users mailing list
> clamav-users at lists.clamav.net
> http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
> 
> 
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
> 
> http://www.clamav.net/contact.html#ml

More information about the clamav-users mailing list