[clamav-users] long timeouts with freshclam

Robert M. Stockmann stock at stokkie.net
Thu Aug 8 22:48:56 EDT 2019



Since Tue Jul 16 11:07:00 CEST 2019 I have experienced long
DNS timeouts with freshclam :

[hubble:root]:(/var/lib/log/clamav)# zgrep "Can't query" freshclam.log*
freshclam.log:Can't query main.58.102.1.0.6810DB54.ping.clamav.net
freshclam.log:Can't query daily.25535.102.1.0.6810DB54.ping.clamav.net
freshclam.log:Can't query bytecode.330.102.1.0.6810DB54.ping.clamav.net
freshclam.log:Can't query main.58.102.1.0.6810DB54.ping.clamav.net
freshclam.log:Can't query daily.25535.102.1.0.6810DB54.ping.clamav.net
freshclam.log:Can't query bytecode.330.102.1.0.6810DB54.ping.clamav.net
freshclam.log.1.gz:Can't query daily.25524.102.1.0.6810DA54.ping.clamav.net
freshclam.log.1.gz:Can't query daily.25525.102.1.0.6810DB54.ping.clamav.net
freshclam.log.1.gz:Can't query daily.25526.102.1.0.6810DB54.ping.clamav.net
freshclam.log.1.gz:Can't query daily.25527.102.1.0.6810DA54.ping.clamav.net
freshclam.log.1.gz:Can't query daily.25528.102.1.0.6810DB54.ping.clamav.net
freshclam.log.1.gz:Can't query daily.25529.102.1.0.6810DA54.ping.clamav.net
freshclam.log.1.gz:Can't query daily.25530.102.1.0.6810DA54.ping.clamav.net
freshclam.log.2.gz:Can't query daily.25517.102.1.0.6810DB54.ping.clamav.net
freshclam.log.2.gz:Can't query daily.25518.102.1.0.6810DA54.ping.clamav.net
freshclam.log.2.gz:Can't query daily.25519.102.1.0.6810DB54.ping.clamav.net
freshclam.log.2.gz:Can't query daily.25520.102.1.0.6810DB54.ping.clamav.net
freshclam.log.2.gz:Can't query daily.25521.102.1.0.6810DA54.ping.clamav.net
freshclam.log.2.gz:Can't query daily.25522.102.1.0.6810DB54.ping.clamav.net
freshclam.log.2.gz:Can't query daily.25523.102.1.0.6810DA54.ping.clamav.net
freshclam.log.3.gz:Can't query daily.25512.102.1.0.6810DA54.ping.clamav.net
freshclam.log.3.gz:Can't query daily.25513.102.1.0.6810DB54.ping.clamav.net
freshclam.log.3.gz:Can't query bytecode.329.102.1.0.6810DB54.ping.clamav.net
freshclam.log.3.gz:Can't query bytecode.330.102.1.0.6810DA54.ping.clamav.net
freshclam.log.3.gz:Can't query daily.25514.102.1.0.6810DA54.ping.clamav.net
freshclam.log.3.gz:Can't query daily.25515.102.1.0.6810DB54.ping.clamav.net
freshclam.log.3.gz:Can't query daily.25516.102.1.0.6810DA54.ping.clamav.net
[hubble:root]:(/var/lib/log/clamav)# 

Here a log after first emptying /var/lib/clamav and next running 
freshclam (while clamd is not running yet) downloading all files again 
new :

--------------------------------------
ClamAV update process started at Fri Aug  9 04:05:32 2019
Downloading main.cvd [100%]
main.cvd updated (version: 58, sigs: 4566249, f-level: 60, builder: sigmgr)
Can't query main.58.102.1.0.6810DB54.ping.clamav.net
Downloading daily.cvd [100%]
daily.cvd updated (version: 25535, sigs: 1705310, f-level: 63, builder: raynman)
Can't query daily.25535.102.1.0.6810DB54.ping.clamav.net
Downloading bytecode.cvd [100%]
bytecode.cvd updated (version: 330, sigs: 94, f-level: 63, builder: neo)
Can't query bytecode.330.102.1.0.6810DB54.ping.clamav.net
Database updated (6271653 signatures) from database.clamav.net (IP: 104.16.219.84)
WARNING: Clamd was NOT notified: Can't connect to clamd through /var/lib/run/clamav/clamd.sock: No such file or directory
--------------------------------------

Several DNS timeout cause long delays with running freshclam
and also starting clamd can take upto two minutes.

Robert
-- 
Robert M. Stockmann - RHCE
Network Engineer - UNIX/Linux Specialist
crashrecovery.org  stock at stokkie.net



More information about the clamav-users mailing list