[clamav-users] No daily sig since July 28th

[Paul Kosinski]

On Mon, 1 Aug 2022 16:24:50 +0100 (BST)
Andrew C Aitchison via clamav-users <clamav-users at lists.clamav.net> wrote:

> On Mon, 1 Aug 2022, Shawn Iverson via clamav-users wrote:
> 
> > Hello,
> >
> > I've noticed that a daily hasn't been posted since the 28th of July. Are
> > daily sigs being posted?  
> 
> #  clamscan --version
> ClamAV 0.103.7/26615/Thu Jul 28 08:58:07 2022
> 
> # host -t txt current.cvd.clamav.net.
> current.cvd.clamav.net descriptive text "0.103.7:62:26615:1659362400:1:90:49192:333"
> 
> # date -u -d "1970-01-01 UTC 1659362400 seconds"
> Mon Aug  1 14:00:00 UTC 2022
> 
> ... so the magic DNS timestamp is being updated,
> but the daily version number has not changed since Thursday.

=============================

Same here on the Cloudflare 'BOS' anycast mirror.


------------------------------  Thursday 28 July 2022 at 04:43:01  ------------------------------

/opt/clamav/bin/testclam-dns
-->  UPD   D 26615/26614 M 62/62 B 333/333

/opt/clamav/bin/freshclam -v --stdout --on-update-execute=EXIT_1
...

...

------------------------------  Monday 01 August 2022 at 12:43:01  ------------------------------

/opt/clamav/bin/testclam-dns
-->  DNS   D 26615/26615 M 62/62 B 333/333


P.S. Testclam-dns is something I created a few years ago (before the bandwidth abuse) when the BOS mirror was often out of date in serving the latest CVD file (which I then mirrored locally). It reports the latest vs the currently installed versions of the 3 principal signature files ("daily", "main" & "bytecode"), and whether freshclam should be invoked. I still use it for its detailed reporting, but now each freshclam instance simply uses the CDIFFs directly. This saves bandwidth compared to locally mirrored CVDs -- unless one has *lots* of ClamAV instances.