[clamav-users] How often can I run cvdupdate?

Orion Poplawski orion at nwra.com
Wed May 25 14:36:55 UTC 2022


We're starting to run clamav on more local hosts and were starting to 
see rate limiting messages.  So I've setup a local private mirror with 
cvdupdate in each of our offices.  However now I'm starting to see 
warnings like:

Received signal: wake up
ClamAV update process started at Wed May 25 07:26:29 2022
daily database available for update (local version: 26551, remote 
version: 26552)
WARNING: downloadFile: file not found: https://MIRROR/daily-26552.cdiff
WARNING: downloadPatch: Can't download daily-26552.cdiff from 
https://MIRROR/daily-26552.cdiff
WARNING: downloadFile: file not found: https://MIRROR/daily-26552.cdiff
WARNING: downloadPatch: Can't download daily-26552.cdiff from 
https://MIRROR/daily-26552.cdiff
WARNING: downloadFile: file not found: https://MIRROR/daily-26552.cdiff
WARNING: downloadPatch: Can't download daily-26552.cdiff from 
https://MIRROR/daily-26552.cdiff
The database server doesn't have the latest patch for the daily database 
(version 26552). The server will likely have updated if you check again 
in a few hours.
main.cvd database is up-to-date (version: 62, sigs: 6647427, f-level: 
90, builder: sigmgr)
bytecode.cvd database is up-to-date (version: 333, sigs: 92, f-level: 
63, builder: awillia2)

which then get reported by logwatch.

The mirror updated a bit later:

2022-05-25 08:15:21 AM - INFO:  Downloaded daily-26552.cdiff
2022-05-25 08:16:22 AM - INFO:  Downloaded daily.cvd. Version: 26552

I'm running cvdupdate at the recommended 4 hour interval.  Can I run it 
more often?  Although I suppose there always may be an interval between 
when a client might see the new version and the mirror downloads it, so 
I may just have to exclude these types of warnings from logwatch.

-- 
Orion Poplawski
he/him/his  - surely the least important thing about me
IT Systems Manager                         720-772-5637
NWRA, Boulder/CoRA Office             FAX: 303-415-9702
3380 Mitchell Lane                       orion at nwra.com
Boulder, CO 80301                 https://www.nwra.com/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 3847 bytes
Desc: S/MIME Cryptographic Signature
URL: <https://lists.clamav.net/pipermail/clamav-users/attachments/20220525/71dda721/attachment.bin>


More information about the clamav-users mailing list