[clamav-users] updates

[Paul Kosinski]

Here is our recent CVD delay report showing how long the actual
daily.cvd (and sometimes bytcode.cvd) file(s) lag behind the DNS TXT
record.

We are located near Boston, and the data comes via Comcast cable, but
our DNS queries use our old, slow static-IP DSL. I keep it this way
because there were stories about some major ISPs munging DSL replies
(like replacing NXDOMAIN with an IP addresse of a Web site belonging to
the ISP). Our DSL, on the other hand, doesn't ever do this, and even
passes port 25, so we can send mail directly (rather than relaying
through a possibly snoopy ISP.)

  2018-08-18 05:03:02  No delay
  2018-08-18 13:18:02  00:15:01 delay
  2018-08-18 21:33:02  00:15:01 delay
  2018-08-19 05:03:01  No delay
  2018-08-19 14:03:01  00:44:59 delay
  2018-08-19 21:18:02  00:15:00 delay
  2018-08-20 05:33:02  00:30:01 delay
  2018-08-20 13:33:02  00:30:00 delay
  2018-08-20 21:03:02  No delay
  2018-08-21 05:18:01  No delay
  2018-08-21 13:03:01  No delay
  2018-08-22 18:18:02  00:15:00 delay
  2018-08-23 02:33:01  00:29:59 delay
  2018-08-23 09:48:02  00:45:00 delay
  2018-08-23 17:03:02  No delay
  2018-08-24 02:18:02  01:15:00 delay
  2018-08-24 09:33:02  00:30:00 delay
  2018-08-24 18:48:02  00:30:01 delay
  2018-08-25 01:18:02  No delay
  2018-08-25 09:18:02  00:15:00 delay
  2018-08-25 17:33:02  00:30:00 delay
  2018-08-26 02:33:01  01:29:59 delay
  2018-08-26 09:48:02  00:45:01 delay
  2018-08-26 18:03:02  01:00:00 delay
  2018-08-27 01:03:01  No delay
  2018-08-27 09:18:02  00:15:00 delay
  2018-08-27 17:33:01  00:29:59 delay
  2018-08-28 01:48:02  00:45:00 delay
  2018-08-28 09:18:02  No delay
  2018-08-28 17:33:01  No delay
  2018-08-29 01:18:01  00:14:59 delay
  2018-08-29 09:33:02  00:30:01 delay
  2018-08-29 17:48:01  00:45:00 delay
  2018-08-30 01:03:01  No delay
  2018-08-30 09:18:02  00:15:00 delay
  2018-08-30 17:18:01  00:14:59 delay
  2018-08-31 01:18:01  00:14:59 delay
  2018-08-31 09:48:02  00:45:01 delay
  2018-08-31 22:18:01  00:45:00 delay
  2018-09-01 05:18:01  00:14:59 delay
  2018-09-01 13:33:02  00:30:00 delay
  2018-09-01 21:48:01  00:44:59 delay
  2018-09-02 07:03:02  01:00:00 delay
  2018-09-02 13:48:01  00:44:59 delay
  2018-09-02 21:03:01  No delay
  2018-09-03 05:03:02  No delay
  2018-09-03 13:03:02  No delay
  2018-09-03 21:03:01  No delay
  2018-09-04 05:03:01  No delay
  2018-09-04 13:03:02  No delay
  2018-09-04 21:03:01  No delay
  2018-09-05 05:03:02  No delay
  2018-09-05 14:18:01  01:14:59 delay
  2018-09-05 21:18:02  00:15:00 delay
  2018-09-06 05:18:02  00:15:00 delay
  2018-09-06 13:33:02  00:30:01 delay
  2018-09-06 21:03:03  No delay
  2018-09-07 05:18:02  00:15:00 delay

----------

On Fri, 7 Sep 2018 15:32:51 +0000
"Micah Snyder (micasnyd)" <micasnyd at cisco.com> wrote:

> Hi Michael,
> 
> Can you tell me what geographic region/country you're coming from?
> We've seen reports of this from a number of users though I've never
> personally observed this.  I am starting to wonder if the issue is
> only occurring in certain region(s).
> 
> Regardless, I am going to try to mitigate the error in the upcoming
> 0.100.2 patch release and 0.101 feature release.
> 
> -Micah
> 
> Micah Snyder
> ClamAV Development
> Talos
> Cisco Systems, Inc.
> 
> 
> On Sep 7, 2018, at 5:11 AM, Michael Da Cova
> <mdacova at netpilot.com<mailto:mdacova at netpilot.com>> wrote:
> 
> Hi
> 
> I still get "WARNING: Mirror 104.16.187.138 is not synchronized"
> often on freshclam updates
> 
> Trying to download http://database.clamav.net/daily.cvd (IP:
> 104.16.187.138) Downloading daily.cvd [100%]
> WARNING: Mirror 104.16.187.138 is not synchronized
> 
> Trying to download http://database.clamav.net/daily.cvd (IP:
> 104.16.185.138) Downloading daily.cvd [100%]
> WARNING: Mirror 104.16.185.138 is not synchronized.
> 
> Trying to download http://database.clamav.net/daily.cvd (IP:
> 104.16.186.138) Downloading daily.cvd [100%]
> WARNING: Mirror 104.16.186.138 is not synchronized.
> 
> Querying daily.0.79.0.0.6810BA8A.ping.clamav.net
> Giving up on database.clamav.net<http://database.clamav.net>...
> 
> I have been deleting the mirror.dat file which seems to help for a
> while
> 
> --
> Michael Da Cova

>