[clamav-users] clamAV: Re: Re: problem in DB update

[Cedric Bhihe]

Hi Harald:   I'm happy. Thank you for the pointers.

Hi Al:
I added the additional mirrors because I use the box in question to 
experiment with
Tor and so its exit nodes' geolocalization will change if I log in and 
out or when I restart
network services. My mistake in that was that I did not realize that 
even though
the box 's exit nodes changes, clamAV DB-server will serve its DB-update
automatically based on its apparent geoloc. In fact I thought that the 
DB-servers'
entries served to force a specific server for DB updates, no matter what 
the geoloc.
Learning never stops.
I also read a post suggesting that only the tw first entries for 
DB-update servers are
taken into account. Cheers.

Am 21/01/17 um 18:27, schrieb Reindl Harald:
> Am 21.01.2017 um 17:49 schrieb Cedric Bhihe:
>> Hallo Harald,
>> What I am writing about is that in the past few weeks, root has been
>> getting a daily email with exactly the content you quoted. It had not
>> always been so before.
>> In other words I did not use to get a straight 100% update, say a year
>> ago, but rather an update process sufficiently long so that the log-
>> trace for the db-update would show:  28% ..45% ...87%.. 100%.
>> So I am wondering whether I really get an update here or if something
>> is wrong. Help welcome, sarcastic or vaguely disparaging comments not.
>> Cheers, -cedric
>
> when it says "Database updated" it was updated - period
> google for diff and be happy that you need not always download the 
> whole monster
>
>> On 21/01/17 17:29, Reindl Harald wrote:
>>> Am 21.01.2017 um 17:22 schrieb Cedric Bhihe:
>>>> The mail sent to root when the daily DB update process has completed
>>>> always is :
>>>>     ClamAV update process started at Thu Jan 19 13:00:01 2017
>>>>     main.cvd is up to date (version: 57, sigs: 4218790, f-level: 60,
>>>> builder: amishhammer)
>>>>     Downloading daily-22909.cdiff [100%]
>>>>     Downloading daily-22910.cdiff [100%]
>>>>     Downloading daily-22911.cdiff [100%]
>>>>     Downloading daily-22912.cdiff [100%]
>>>>     Downloading daily-22913.cdiff [100%]
>>>>     daily.cld updated (version: 22913, sigs: 1381786, f-level: 63,
>>>> builder: neo)
>>>>     bytecode.cld is up to date (version: 285, sigs: 57, f-level: 63,
>>>> builder: bbaker)
>>>>     Database updated (5600633 signatures) from db.us.clamav.net (IP:
>>>> 64.22.33.90)
>>>> There is never an update apparently and I smell something fishy (no 
>>>> pun
>>>> intended)
>>> what are you talking about when you even quote "daily.cld updated" and
>>> "Database updated (5600633 signatures)"