[clamav-users] Warning in ClamAV update process
I always get these warnings and it is always ip 192.121.13.5 Any way to avoid these warnings? Debian 7.0 clamav 0.98.4 Last Status: main.cvd is up to date (version: 55, sigs: 2424225, f-level: 60, builder: neo) WARNING: getfile: daily-19353.cdiff not found on remote server (IP: 192.121.13.5) WARNING: getpatch: Can't download daily-19353.cdiff from db.local.clamav.net Trying host db.local.clamav.net (193.1.193.64)... Downloading daily-19353.cdiff [100%] daily.cld updated (version: 19353, sigs: 1098868, f-level: 63, builder: neo) bytecode.cvd is up to date (version: 242, sigs: 46, f-level: 63, builder: dgoddard) Database updated (3523139 signatures) from db.local.clamav.net (IP: 193.1.193.64) Clamd successfully notified about the update. The following ERRORS and/or WARNINGS were detected when running the ClamAV update process. If these ERRORS and/or WARNINGS do not show up in the Last Status section above, then their underlying cause has probably been corrected. WARNINGS: getpatch: Can't download daily-19348.cdiff from db.local.clamav.net: 1 Time(s) getfile: daily-19353.cdiff not found on remote server (IP: 192.121.13.5): 1 Time(s) getfile: daily-19348.cdiff not found on remote server (IP: 192.121.13.5): 1 Time(s) getpatch: Can't download daily-19353.cdiff from db.local.clamav.net: 1 Time(s) Regards tommy -- Med vänlig hälsning Tommy Berglund ___ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml
Re: [clamav-users] Warning in ClamAV update process
On Thu, Sep 11, 2014 at 12:27 AM, Tommy Berglund wrote: I always get these warnings and it is always ip 192.121.13.5 Any way to avoid these warnings? That mirror appear to be located in Sweden. Depending on where in the world you are located, you _might_ see improvement by changing the following in freshclam.conf: # Country of origin of malware/detection statistics (for statistical # purposes only). The statistics collector at ClamAV.net will look up # your IP address to determine the geographical origin of the malware # reported by your installation. If this installation is mainly used to # scan data which comes from a different location, please enable this # option and enter a two-letter code (see http://www.iana.org/domains/root/db/) # of the country of origin. # Default: disabled #DetectionStatsCountry country-code DetectionStatsCountry XX Freshclam usually does a pretty good job of figuring out where you are based on your IP address and match you to closest mirrors, but that doesn’t always work. There are also occasions when a mirror will block IP addresses outside of nation boundaries. They aren’t supposed to, but I know it has happened. === Question for ClamAV® team. Have you done away with the Mirror Status page? (was http://www.clamav.net/mirrors.html) I used it quite often to troubleshoot issues such as this one. -Al- -- Al Varnell Mountain View, CA ___ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml
Re: [clamav-users] Warning in ClamAV update process
Den 2014-09-11 09:59, Al Varnell skrev: On Thu, Sep 11, 2014 at 12:27 AM, Tommy Berglund wrote: I always get these warnings and it is always ip 192.121.13.5 Any way to avoid these warnings? That mirror appear to be located in Sweden. Depending on where in the world you are located, you _might_ see improvement by changing the following in freshclam.conf: Yes I live in Sweden, has tried with Database Mirror db.se.clamav.net and it gets the same results. Always the same server that gives error, maybe not available anymore. Question for ClamAV® team. Have you done away with the Mirror Status page? (was http://www.clamav.net/mirrors.html) I used it quite often to troubleshoot issues such as this one. I get error 404 for this page http://www.clamav.net/mirrors.html perhaps also not available anymore. Thanks Al for your answers! -- Regards tommy ___ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml
Re: [clamav-users] Warning in ClamAV update process
On Thursday 11 September 2014 05:10:52 Tommy Berglund did opine And Gene did reply: Den 2014-09-11 09:59, Al Varnell skrev: On Thu, Sep 11, 2014 at 12:27 AM, Tommy Berglund wrote: I always get these warnings and it is always ip 192.121.13.5 Any way to avoid these warnings? That mirror appear to be located in Sweden. Depending on where in the world you are located, you _might_ see improvement by changing the following in freshclam.conf: Yes I live in Sweden, has tried with Database Mirror db.se.clamav.net and it gets the same results. Always the same server that gives error, maybe not available anymore. Question for ClamAV® team. Have you done away with the Mirror Status page? (was http://www.clamav.net/mirrors.html) I used it quite often to troubleshoot issues such as this one. I get error 404 for this page http://www.clamav.net/mirrors.html perhaps also not available anymore. Thanks Al for your answers! I also am getting a 404, but the rotating red devils head graphic is a new image to me. Since its a giant version of the same image at http://www.clamav.net/contact.html#ml, I have to assume that the mirrors.html file is missing from the clamav.net server. It looks to me as if the left hand is not communicating with the right hand, and is systematically trying to destroy clamav. We expect that from M$, but your new management does not seem to be on the same page as its users have been for years. Cheers, Gene Heskett -- There are four boxes to be used in defense of liberty: soap, ballot, jury, and ammo. Please use in that order. -Ed Howdershelt (Author) Genes Web page http://geneslinuxbox.net:6309/gene US V Castleman, SCOTUS, Mar 2014 is grounds for Impeaching SCOTUS ___ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml
Re: [clamav-users] Warning in ClamAV update process
On Sep 11, 2014, at 5:10 AM, Tommy Berglund to...@fam-berglund.eumailto:to...@fam-berglund.eu wrote: Den 2014-09-11 09:59, Al Varnell skrev: On Thu, Sep 11, 2014 at 12:27 AM, Tommy Berglund wrote: I always get these warnings and it is always ip 192.121.13.5 Any way to avoid these warnings? That mirror appear to be located in Sweden. Depending on where in the world you are located, you _might_ see improvement by changing the following in freshclam.conf: Yes I live in Sweden, has tried with Database Mirror db.se.clamav.nethttp://db.se.clamav.net and it gets the same results. Always the same server that gives error, maybe not available anymore. Question for ClamAV® team. Have you done away with the Mirror Status page? (was http://www.clamav.net/mirrors.html) I used it quite often to troubleshoot issues such as this one. I get error 404 for this page http://www.clamav.net/mirrors.html perhaps also not available anymore. The mirrors page and the stats page we’re working on (phase 2) for the site. We have a different way we’re going to be displaying the stats and mirrors, and it isn’t ready yet. Sorry for the inconvenience for anyone affected. -- Joel Esler Open Source Manager Threat Intelligence Team Lead Talos ___ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml
Re: [clamav-users] Warning in ClamAV update process
On Sep 11, 2014, at 7:15 AM, Gene Heskett ghesk...@wdtv.commailto:ghesk...@wdtv.com wrote: On Thursday 11 September 2014 05:10:52 Tommy Berglund did opine And Gene did reply: Den 2014-09-11 09:59, Al Varnell skrev: On Thu, Sep 11, 2014 at 12:27 AM, Tommy Berglund wrote: I always get these warnings and it is always ip 192.121.13.5 Any way to avoid these warnings? That mirror appear to be located in Sweden. Depending on where in the world you are located, you _might_ see improvement by changing the following in freshclam.conf: Yes I live in Sweden, has tried with Database Mirror db.se.clamav.nethttp://db.se.clamav.net and it gets the same results. Always the same server that gives error, maybe not available anymore. Question for ClamAV® team. Have you done away with the Mirror Status page? (was http://www.clamav.net/mirrors.html) I used it quite often to troubleshoot issues such as this one. I get error 404 for this page http://www.clamav.net/mirrors.html perhaps also not available anymore. Thanks Al for your answers! I also am getting a 404, but the rotating red devils head graphic is a new image to me. Since its a giant version of the same image at http://www.clamav.net/contact.html#ml, I have to assume that the mirrors.html file is missing from the clamav.nethttp://clamav.net server. Well, it doesn’t exist on the new server. I just answered this in another thread as well, but this page (and the stats page) weren’t ready for the new site yet. We’re still working in it. It looks to me as if the left hand is not communicating with the right hand, and is systematically trying to destroy clamav. We expect that from M$, but your new management does not seem to be on the same page as its users have been for years. I don’t think there is anyone “systematically trying to destroy clamav”, and take issue with that statement. What can I do better to communicate to you? My statistics on usage and downloads don’t illustrate what you are complaining about, so what can I do to make it better for you? -- Joel Esler Open Source Manager Threat Intelligence Team Lead Talos ___ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml
Re: [clamav-users] Warning in ClamAV update process
On 9/11/2014 4:25 PM, Joel Esler (jesler) wrote: On Sep 11, 2014, at 7:15 AM, Gene Heskett ghesk...@wdtv.commailto:ghesk...@wdtv.com wrote: On Thursday 11 September 2014 05:10:52 Tommy Berglund did opine And Gene did reply: Den 2014-09-11 09:59, Al Varnell skrev: On Thu, Sep 11, 2014 at 12:27 AM, Tommy Berglund wrote: I always get these warnings and it is always ip 192.121.13.5 Any way to avoid these warnings? That mirror appear to be located in Sweden. Depending on where in the world you are located, you _might_ see improvement by changing the following in freshclam.conf: Yes I live in Sweden, has tried with Database Mirror db.se.clamav.nethttp://db.se.clamav.net and it gets the same results. Always the same server that gives error, maybe not available anymore. Question for ClamAV® team. Have you done away with the Mirror Status page? (was http://www.clamav.net/mirrors.html) I used it quite often to troubleshoot issues such as this one. I get error 404 for this page http://www.clamav.net/mirrors.html perhaps also not available anymore. Thanks Al for your answers! I also am getting a 404, but the rotating red devils head graphic is a new image to me. Since its a giant version of the same image at http://www.clamav.net/contact.html#ml, I have to assume that the mirrors.html file is missing from the clamav.nethttp://clamav.net server. Well, it doesn’t exist on the new server. I just answered this in another thread as well, but this page (and the stats page) weren’t ready for the new site yet. We’re still working in it. It looks to me as if the left hand is not communicating with the right hand, and is systematically trying to destroy clamav. We expect that from M$, but your new management does not seem to be on the same page as its users have been for years. I don’t think there is anyone “systematically trying to destroy clamav”, and take issue with that statement. What can I do better to communicate to you? My statistics on usage and downloads don’t illustrate what you are complaining about, so what can I do to make it better for you? Step one would be fixing your email program so that it properly marks quoted text. Your replies are getting mixed in with the quoted text so that we can't tell where the quote ends and your response begins. Take a look above. There are comments from Gene Heskett, Tommy Berglund, Al Varnell, and yourself. Can you tell who is saying what? -- Bowie ___ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml
Re: [clamav-users] Warning in ClamAV update process
On Sep 11, 2014, at 4:36 PM, Bowie Bailey bowie_bai...@buc.com wrote: On 9/11/2014 4:25 PM, Joel Esler (jesler) wrote: On Sep 11, 2014, at 7:15 AM, Gene Heskett ghesk...@wdtv.commailto:ghesk...@wdtv.com wrote: On Thursday 11 September 2014 05:10:52 Tommy Berglund did opine And Gene did reply: Den 2014-09-11 09:59, Al Varnell skrev: On Thu, Sep 11, 2014 at 12:27 AM, Tommy Berglund wrote: I always get these warnings and it is always ip 192.121.13.5 Any way to avoid these warnings? That mirror appear to be located in Sweden. Depending on where in the world you are located, you _might_ see improvement by changing the following in freshclam.conf: Yes I live in Sweden, has tried with Database Mirror db.se.clamav.nethttp://db.se.clamav.net and it gets the same results. Always the same server that gives error, maybe not available anymore. Question for ClamAV® team. Have you done away with the Mirror Status page? (was http://www.clamav.net/mirrors.html) I used it quite often to troubleshoot issues such as this one. I get error 404 for this page http://www.clamav.net/mirrors.html perhaps also not available anymore. Thanks Al for your answers! I also am getting a 404, but the rotating red devils head graphic is a new image to me. Since its a giant version of the same image at http://www.clamav.net/contact.html#ml, I have to assume that the mirrors.html file is missing from the clamav.nethttp://clamav.net server. Well, it doesn’t exist on the new server. I just answered this in another thread as well, but this page (and the stats page) weren’t ready for the new site yet. We’re still working in it. It looks to me as if the left hand is not communicating with the right hand, and is systematically trying to destroy clamav. We expect that from M$, but your new management does not seem to be on the same page as its users have been for years. I don’t think there is anyone “systematically trying to destroy clamav”, and take issue with that statement. What can I do better to communicate to you? My statistics on usage and downloads don’t illustrate what you are complaining about, so what can I do to make it better for you? Step one would be fixing your email program so that it properly marks quoted text. Your replies are getting mixed in with the quoted text so that we can't tell where the quote ends and your response begins. Take a look above. There are comments from Gene Heskett, Tommy Berglund, Al Varnell, and yourself. Can you tell who is saying what? Yeah, beta email client. :) ___ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml
Re: [clamav-users] Warning in ClamAV update process
On Thursday 11 September 2014 16:25:27 Joel Esler (jesler) did opine And Gene did reply: On Sep 11, 2014, at 7:15 AM, Gene Heskett ghesk...@wdtv.commailto:ghesk...@wdtv.com wrote: On Thursday 11 September 2014 05:10:52 Tommy Berglund did opine And Gene did reply: Den 2014-09-11 09:59, Al Varnell skrev: On Thu, Sep 11, 2014 at 12:27 AM, Tommy Berglund wrote: I always get these warnings and it is always ip 192.121.13.5 Any way to avoid these warnings? That mirror appear to be located in Sweden. Depending on where in the world you are located, you _might_ see improvement by changing the following in freshclam.conf: Yes I live in Sweden, has tried with Database Mirror db.se.clamav.nethttp://db.se.clamav.net and it gets the same results. Always the same server that gives error, maybe not available anymore. Question for ClamAVآ® team. Have you done away with the Mirror Status page? (was http://www.clamav.net/mirrors.html) I used it quite often to troubleshoot issues such as this one. I get error 404 for this page http://www.clamav.net/mirrors.html perhaps also not available anymore. Thanks Al for your answers! I also am getting a 404, but the rotating red devils head graphic is a new image to me. Since its a giant version of the same image at http://www.clamav.net/contact.html#ml, I have to assume that the mirrors.html file is missing from the clamav.nethttp://clamav.net server. Well, it doesn’t exist on the new server. I just answered this in another thread as well, but this page (and the stats page) weren’t ready for the new site yet. We’re still working in it. It looks to me as if the left hand is not communicating with the right hand, and is systematically trying to destroy clamav. We expect that from M$, but your new management does not seem to be on the same page as its users have been for years. I don’t think there is anyone “systematically trying to destroy clamavâ€, and take issue with that statement. What can I do better to communicate to you? My statistics on usage and downloads don’t illustrate what you are complaining about, so what can I do to make it better for you? I am not currently, and haven't for about a year, had a problem with freshclam. My comment is based as much on the repeat nature of this particular problem as its reported here on this list. But there is also something else to consider, and that is the overflow in the BGP in the master network dns servers. I cannot, and have not been able to access the www.uspo.gov site for several days as the dns servers I get from my cable provider are suffering from this same overflow condition, so the site does not exist. So I can't traceroute a package thru the USPO In case you're not aware of that problem, here is a link to the source of the story on zdnet. http://www.zdnet.com/internet-hiccups-today-youre-not-alone-heres- why-732566/ -- Joel Esler Open Source Manager Threat Intelligence Team Lead Talos ___ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml Cheers, Gene Heskett -- There are four boxes to be used in defense of liberty: soap, ballot, jury, and ammo. Please use in that order. -Ed Howdershelt (Author) Genes Web page http://geneslinuxbox.net:6309/gene US V Castleman, SCOTUS, Mar 2014 is grounds for Impeaching SCOTUS ___ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml
