From clamav-users-bounces@lists.clamav.net  Mon Jul 14 23:21:39 2008
Return-Path: <clamav-users-bounces@lists.clamav.net>
X-Original-To: list@tad.clamav.net
Delivered-To: list@tad.clamav.net
X-Virus-Scanned: Debian amavisd-new at tad.clamav.net
Received: from tad.clamav.net ([127.0.0.1])
	by localhost (tad.clamav.net [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id rvTCByJp7DBt; Mon, 14 Jul 2008 23:21:38 +0200 (CEST)
Received: from tad.clamav.net (localhost.localdomain [127.0.0.1])
	by tad.clamav.net (Postfix) with ESMTP id 5B7DD16C214;
	Mon, 14 Jul 2008 23:21:37 +0200 (CEST)
X-Original-To: clamav-users@tad.clamav.net
Delivered-To: clamav-users@tad.clamav.net
X-Virus-Scanned: Debian amavisd-new at tad.clamav.net
Received: from tad.clamav.net ([127.0.0.1])
	by localhost (tad.clamav.net [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id qS-Eu204LZMD for <clamav-users@tad.clamav.net>;
	Mon, 14 Jul 2008 23:21:35 +0200 (CEST)
Received: from Quad (localhost.localdomain [127.0.0.1])
	by tad.clamav.net (Postfix) with ESMTP id 00AB216C218
	for <clamav-users@lists.clamav.net>;
	Mon, 14 Jul 2008 23:21:34 +0200 (CEST)
Date: Mon, 14 Jul 2008 23:21:36 +0200
From: Tomasz Kojm <tkojm@clamav.net>
To: clamav-users@lists.clamav.net
Message-ID: <20080714232136.44c13ee8@Quad>
In-Reply-To: <20080714205913.7ED621BF28D@ws1-1.us4.outblaze.com>
References: <20080714205913.7ED621BF28D@ws1-1.us4.outblaze.com>
Organization: ClamAV
X-Mailer: Claws Mail 3.5.0 (GTK+ 2.12.10; x86_64-pc-linux-gnu)
Mime-Version: 1.0
Subject: Re: [Clamav-users] Database correctly reloaded (0 signatures)
X-BeenThere: clamav-users@lists.clamav.net
X-Mailman-Version: 2.1.9
Precedence: list
Reply-To: ClamAV users ML <clamav-users@lists.clamav.net>
List-Id: ClamAV users ML <clamav-users.lists.clamav.net>
List-Unsubscribe: <http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users>,
	<mailto:clamav-users-request@lists.clamav.net?subject=unsubscribe>
List-Post: <mailto:clamav-users@lists.clamav.net>
List-Help: <mailto:clamav-users-request@lists.clamav.net?subject=help>
List-Subscribe: <http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users>,
	<mailto:clamav-users-request@lists.clamav.net?subject=subscribe>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Sender: clamav-users-bounces@lists.clamav.net
Errors-To: clamav-users-bounces@lists.clamav.net

On Mon, 14 Jul 2008 15:59:13 -0500
"Oscar Usifer" <oscaruser@programmer.net> wrote:

> -- /var/log/clamav/clamd.log

The logs prove that this was (is?) a problem with your clamav installation.
Most likely, freshclam was updating files in another directory.

See - clamd loads the same number (231780) of signatures on Jun 21 and 22:

> Sat Jun 21 02:35:18 2008 -> Reading databases from /var/lib/clamav
> Sat Jun 21 02:35:21 2008 -> Database correctly reloaded (231780 signatures)
> Sat Jun 21 09:35:18 2008 -> SelfCheck: Database modification detected. Forcing reload.
> Sat Jun 21 09:35:18 2008 -> Reading databases from /var/lib/clamav
> Sat Jun 21 09:35:22 2008 -> Database correctly reloaded (231780 signatures)
> Sat Jun 21 10:35:19 2008 -> SelfCheck: Database modification detected. Forcing reload.
> Sat Jun 21 10:35:20 2008 -> Reading databases from /var/lib/clamav
> Sat Jun 21 10:35:23 2008 -> Database correctly reloaded (231780 signatures)
[...]
> Sun Jun 22 10:44:56 2008 -> Reading databases from /var/lib/clamav
> Sun Jun 22 10:44:59 2008 -> Database correctly reloaded (231780 signatures)
> Sun Jun 22 13:35:27 2008 -> SelfCheck: Database modification detected. Forcing reload.
> Sun Jun 22 13:35:28 2008 -> Reading databases from /var/lib/clamav
> Sun Jun 22 13:35:31 2008 -> Database correctly reloaded (231780 signatures)
[...]
> Mon Jun 23 10:35:41 2008 -> Database correctly reloaded (231780 signatures)
> Mon Jun 23 12:25:30 2008 -> SelfCheck: Database status OK.
> Mon Jun 23 12:49:50 2008 -> Reading databases from /var/lib/clamav
> Mon Jun 23 12:49:51 2008 -> Database correctly reloaded (0 signatures)

At some point the old database files disappear (if you're using clamav from your
distribution they could be removed during some update).

But at the same time, freshclam shows a proper number of signatures and
keeps the database up to date:

> /var/log/clamav/freshclam.log
> 
> Mon Jun 23 10:35:35 2008 -> Received signal: wake up
> Mon Jun 23 10:35:35 2008 -> ClamAV update process started at Mon Jun 23 10:35:35 2008
> Mon Jun 23 10:35:35 2008 -> main.cvd is up to date (version: 46, sigs: 231834, f-level: 26, builder: sven)
> Mon Jun 23 10:35:36 2008 -> Downloading daily-7542.cdiff [100%]
> Mon Jun 23 10:35:37 2008 -> daily.cld updated (version: 7542, sigs: 94559, f-level: 31, builder: sven)
> Mon Jun 23 10:35:37 2008 -> Database updated (326393 signatures) from db.us.clamav.net (IP: 65.120.238.2)

Please make sure that DatabaseDirectory points to the same path in both
clamd.conf and freshclam.conf

-- 
   oo    .....         Tomasz Kojm <tkojm@clamav.net>
  (\/)\.........         http://www.ClamAV.net/gpg/tkojm.gpg
     \..........._         0DCA5A08407D5288279DB43454822DC8985A444B
       //\   /\              Mon Jul 14 23:07:53 CEST 2008
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

