[Pkg-clamav-devel] Bug#507132: FW by linux4michelle at tamay-dogan.net : Re: Bug#507132: Bug#507132: connection errors

[Michael Tautschnig]

[...]
> 
> Please can you check ONE URL and then post it immediatly to me and I can
> tray to get exact the same URL?
>

Ok, tried just now on a server located in Austria:

server:~# freshclam --list-mirrors
Mirror #1
IP: 129.27.65.27
Successes: 1478
Failures: 12
Last access: Mon Dec  1 15:28:13 2008
Ignore: No
-------------------------------------
Mirror #2
IP: 81.223.20.171
Successes: 2846
Failures: 13
Last access: Mon Dec  1 18:28:14 2008
Ignore: No

(your output of freshclam --list-mirrors may be useful as well)

server:~# freshclam -v --datadir=/tmp/clamav
Current working dir is /tmp/clamav
Max retries == 5
ClamAV update process started at Mon Dec  1 20:19:03 2008
Using IPv6 aware code
Querying current.cvd.clamav.net
TTL: 387
Software version from DNS: 0.94.2
WARNING: Your ClamAV installation is OUTDATED!
WARNING: Local version: 0.94.1 Recommended version: 0.94.2
DON'T PANIC! Read http://www.clamav.net/support/faq
Retrieving http://db.local.clamav.net/main.cvd
Trying to download http://db.local.clamav.net/main.cvd (IP: 81.223.20.171)
Downloading main.cvd [100%]
main.cvd updated (version: 49, sigs: 437972, f-level: 35, builder: sven)
Retrieving http://db.local.clamav.net/daily.cvd
Trying to download http://db.local.clamav.net/daily.cvd (IP: 81.223.20.171)
Downloading daily.cvd [100%]
daily.cvd updated (version: 8704, sigs: 31342, f-level: 38, builder: ccordes)
WARNING: Your ClamAV installation is OUTDATED!
WARNING: Current functionality level = 37, recommended = 38
DON'T PANIC! Read http://www.clamav.net/support/faq
Database updated (469314 signatures) from db.local.clamav.net (IP: 81.223.20.171)

[...]
> 
> OK, because clamav-freshclam make  trouble  with  the  mirrors,  I  have
> installed from <volatile> clamav-data which lead to  2-3  downloads  per
> day of each 18 MBytes...  <grmpf>
> 
> So, should I reinstall "clamav-freshclam" to continue debuging?
> 
Hmm, did you upgrade all of clamav to the version from volatile? You should have
done so, upgrading clamav-data only will not get us much further ...

> I asume yes, and if you want to get a tcpdump, where should I take it?
> On the GSM-Router ppp0 or the Intranet-Mailserver eth0?
> 
> Commandline options?
>

Whereever you can catch all the packets that should travel from/to clamav
upgrade servers. The commandline should be

tcpdump -vvv -i eth0 tcp port 80

You might want to experiment with -v vs. -vvv to see how much output is useful.

[...]

Best,
Michael


-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 194 bytes
Desc: not available
Url : http://lists.alioth.debian.org/pipermail/pkg-clamav-devel/attachments/20081201/819df021/attachment.pgp