[clamav-users] long timeouts with freshclam

Robert M. Stockmann stock at stokkie.net
Thu Aug 8 22:48:56 EDT 2019

Since Tue Jul 16 11:07:00 CEST 2019 I have experienced long
DNS timeouts with freshclam :

[hubble:root]:(/var/lib/log/clamav)# zgrep "Can't query" freshclam.log*
freshclam.log:Can't query main.
freshclam.log:Can't query daily.25535.
freshclam.log:Can't query bytecode.330.
freshclam.log:Can't query main.
freshclam.log:Can't query daily.25535.
freshclam.log:Can't query bytecode.330.
freshclam.log.1.gz:Can't query daily.25524.
freshclam.log.1.gz:Can't query daily.25525.
freshclam.log.1.gz:Can't query daily.25526.
freshclam.log.1.gz:Can't query daily.25527.
freshclam.log.1.gz:Can't query daily.25528.
freshclam.log.1.gz:Can't query daily.25529.
freshclam.log.1.gz:Can't query daily.25530.
freshclam.log.2.gz:Can't query daily.25517.
freshclam.log.2.gz:Can't query daily.25518.
freshclam.log.2.gz:Can't query daily.25519.
freshclam.log.2.gz:Can't query daily.25520.
freshclam.log.2.gz:Can't query daily.25521.
freshclam.log.2.gz:Can't query daily.25522.
freshclam.log.2.gz:Can't query daily.25523.
freshclam.log.3.gz:Can't query daily.25512.
freshclam.log.3.gz:Can't query daily.25513.
freshclam.log.3.gz:Can't query bytecode.329.
freshclam.log.3.gz:Can't query bytecode.330.
freshclam.log.3.gz:Can't query daily.25514.
freshclam.log.3.gz:Can't query daily.25515.
freshclam.log.3.gz:Can't query daily.25516.

Here a log after first emptying /var/lib/clamav and next running 
freshclam (while clamd is not running yet) downloading all files again 
new :

ClamAV update process started at Fri Aug  9 04:05:32 2019
Downloading main.cvd [100%]
main.cvd updated (version: 58, sigs: 4566249, f-level: 60, builder: sigmgr)
Can't query main.
Downloading daily.cvd [100%]
daily.cvd updated (version: 25535, sigs: 1705310, f-level: 63, builder: raynman)
Can't query daily.25535.
Downloading bytecode.cvd [100%]
bytecode.cvd updated (version: 330, sigs: 94, f-level: 63, builder: neo)
Can't query bytecode.330.
Database updated (6271653 signatures) from database.clamav.net (IP:
WARNING: Clamd was NOT notified: Can't connect to clamd through /var/lib/run/clamav/clamd.sock: No such file or directory

Several DNS timeout cause long delays with running freshclam
and also starting clamd can take upto two minutes.

Robert M. Stockmann - RHCE
Network Engineer - UNIX/Linux Specialist
crashrecovery.org  stock at stokkie.net

More information about the clamav-users mailing list