I agree this would be a useful feature for freshclam. If freshclam pulls down .cvd files to the PrivateMirrorís web server DocumentRoot then a client instance of freshclam with PrivateMirror set should try for those files first. They probably do .cld files first because .cld files are uncompressed and easier to work with (if they are available) but thatís just a guess.


At the very least, there should be a freshclam switch to choose to try one or the other extension first. Either way, if you want to see that changed youíll probably need to hit the developer list to inquire either how to submit a feature request (and wait however long that takes for it to happen) or see if anyone can guide you to where in the code that order is set and how to change it for your own custom build (which sounds like a lot of work to me).


Or you could do what I did and accept that this is how it is and filter the offending lines before they get sent upstream to the log aggregation server (if youíre not under some legal / regulatory obligation to retain all logs, untouched).


Best of luck!


Scott





From: clamav-users <clamav-users-bounces@lists.clamav.net> on behalf of vin9999 via clamav-users <clamav-users@lists.clamav.net>
Sent: March 23, 2020 7:57 AM
To: clamav-users@lists.clamav.net <clamav-users@lists.clamav.net>
Cc: vin9999 <vin9999@protonmail.com>
Subject: [clamav-users] PrivateMirror set on client machine. Disable cld downloads
 
Hello,

Would it be possible if set the following settings on the client: PrivateMirror <lan.ip>, to not try to download the .cld files? as those do not exist on the PrivateMirror. But if on the client is set PrivateMirror, the client keeps giving 404 errors on trying to download .cld files. It does download the .cvd file. But the 404 errors give issues on non existing .cld files.
This happens when running:
#freshclam

Inshort: how can we disable .cld downloads? (and only .cvd download) as the .cld files are not there.

Latest version clamav.

Thank you,
Vin

(emailed before but think went wrong, never email to this before)