[clamav-users] No good deed goes unpunished, or, why CVD files don't work

Paul Kosinski clamav-users at iment.com
Sat Dec 22 10:47:41 EST 2018


Checking less frequently would be nice, but there seems to be a fair
amount of jitter in the update times. Or that an artifact of caching
(DNS or otherwise)?


On Thu, 20 Dec 2018 15:23:13 +0000
"Joel Esler (jesler)" <jesler at cisco.com> wrote:

> Right.  We only publish at certain times a day.  I think a check once
> an hour is probably fine.   
> 
> Sent from my  iPhone
> 
> > On Dec 20, 2018, at 09:55, Paul Kosinski <clamav-users at iment.com>
> > wrote:
> > 
> > Only DNS TXT queries are done 3-5 times per hour. Freshclam itself
> > is only run whenever that reports that there is something new
> > available, as determined by the DNS TXT result showing a higher
> > version number than the *local* CLD file shows. In practice, this
> > means that freshclam is only run a few times per day. (Recently,
> > updates only seem to occur at about 03:xx, 11:xx and 19:xx GMT,
> > i.e., three times per day.)
> > 
> > 
> > On Wed, 19 Dec 2018 21:14:58 -0800
> > Al Varnell <alvarnell at mac.com> wrote:
> > 
> >> Note these restrictions:
> >> 
> >>> How many times per hour shall I run freshclam?
> >>> You can check for database update as often as 4 times per hour
> >>> provided that you have the following options in freshclam.conf:
> >>> 
> >>> DNSDatabaseInfo current.cvd.clamav.net
> >>> 
> >>> DatabaseMirror db.XY.clamav.net
> >>> 
> >>> DatabaseMirror database.clamav.net
> >>> 
> >>> Replace XY with your country code. If you don’t have that option,
> >>> then you must stick with 1 check per hour.
> >> 
> >> -Al-
> >> 
> >>> On Wed, Dec 19, 2018 at 12:26 PM, Paul Kosinski wrote:
> >>> They all do DNS TXT queries 3-5 times per hour...



More information about the clamav-users mailing list