David, Thanks, so when you say freshclam "completed successfully" you mean there were no temp files left?
Steve On Tue, Jun 20, 2017 at 11:21 AM, David Pullman <david.pull...@gmail.com> wrote: > Steve, > > Yes, we run freshclam and then clamscan once each day at 00:03 UTC. There > were many days of tmp directories. We ran the freshclam utility by hand > yesterday, on the instance the logs are from, at about 22:00 UTC, and it > completed the download. The subsequent update at 00:03 this morning > completed successfully as well. > > The version is the package install on Ubuntu of clamav and > clamav-freshclam: 0.99.2+addedllvm-0ubuntu0.14.04.1. > > Thanks! > > David > > On Tue, Jun 20, 2017 at 11:03 AM, Steven Morgan <smor...@sourcefire.com> > wrote: > > > David, > > > > So freshclam runs every day at ~00:03:00, and to confirm, the temp > > directories/files are left for each of these runs? > > > > Which version of ClamAV are you using? > > > > Steve > > > > On Tue, Jun 20, 2017 at 7:51 AM, David Pullman <david.pull...@gmail.com> > > wrote: > > > > > Hi Steve, > > > > > > I've gathered some logs from one of the servers that had a bunch of the > > > clamor-nnnnnnnnnn.tmp directories over a number of days. I've > aggregated > > > seven days of them below (we rotate the log daily). We run freshclam > from > > > cron each day. > > > > > > Please let me know if there's any suggestion on how I can get a > > definitive > > > reason for this, or correcting this? We have two issues, one is of > course > > > that the sigs are not updated, but also on some of the smaller > instances > > > the disk space is affected by the tmp files left in /var/lib/clamav. > > > > > > Thanks very much for any suggestions or help! > > > > > > Tue Jun 13 00:03:01 2017 -> -------------------------------------- > > > Tue Jun 13 00:03:01 2017 -> ClamAV update process started at Tue Jun 13 > > > 00:03:01 2017 > > > Tue Jun 13 00:03:01 2017 -> main.cld is up to date (version: 58, sigs: > > > 4566249, f-level: 60, builder: sigmgr) > > > Tue Jun 13 00:03:09 2017 -> Downloading daily-23452.cdiff [100%] > > > Tue Jun 13 00:03:10 2017 -> Downloading daily-23453.cdiff [100%] > > > Tue Jun 13 00:03:13 2017 -> Downloading daily-23454.cdiff [100%] > > > Wed Jun 14 00:03:02 2017 -> -------------------------------------- > > > Wed Jun 14 00:03:02 2017 -> ClamAV update process started at Wed Jun 14 > > > 00:03:02 2017 > > > Wed Jun 14 00:03:02 2017 -> main.cld is up to date (version: 58, sigs: > > > 4566249, f-level: 60, builder: sigmgr) > > > Wed Jun 14 00:03:38 2017 -> nonblock_connect: connect timing out (30 > > secs) > > > > > > > > _______________________________________________ > > clamav-users mailing list > > clamav-users@lists.clamav.net > > http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users > > > > > > Help us build a comprehensive ClamAV guide: > > https://github.com/vrtadmin/clamav-faq > > > > http://www.clamav.net/contact.html#ml > > > _______________________________________________ > clamav-users mailing list > clamav-users@lists.clamav.net > http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users > > > Help us build a comprehensive ClamAV guide: > https://github.com/vrtadmin/clamav-faq > > http://www.clamav.net/contact.html#ml > _______________________________________________ clamav-users mailing list clamav-users@lists.clamav.net http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml
