[Pkg-clamav-devel] Bug#774763: clamav-unofficial-sigs: Updating the databases timeouts on a regular basis

[Francois Gouget]

Package: clamav-unofficial-sigs
Version: 3.7.2-2
Severity: normal

Dear Maintainer,

The clamav-unofficial-sigs cron jobs regularly reports:

Subject: Cron <clamav at amboise> [ -x /usr/sbin/clamav-unofficial-sigs ] &&
    /usr/sbin/clamav-unofficial-sigs

curl: (56) Recv failure: Connexion ré-initialisée par le correspondant
curl: (56) Recv failure: Connexion ré-initialisée par le correspondant
curl: (28) Connection timed out after 15001 milliseconds
curl: (28) Connection timed out after 15001 milliseconds
curl: (56) Recv failure: Connexion ré-initialisée par le correspondant
curl: (28) Connection timed out after 15000 milliseconds
curl: (28) Connection timed out after 15000 milliseconds

Meanwhile I have a Munin plugin that checks connectivity to a server on the Internet which shows no connection trouble. So it seems the unofficial servers are pretty unreliable.
Unfortunately the script also makes it hard to know exactly which server is proving troublesome. Fortunately inspecting the script shows there's a log, /var/log/clamav-unofficial-sigs.log, and inspecting the log shows that bad server seems to be clamav.securiteinfo.com:

janv. 07 05:53:04 WARNING - Failed curl connection to clamav.securiteinfo.com - SKIPPED SecuriteInfo honeynet.hdb update
janv. 07 05:53:15 WARNING - Failed curl connection to clamav.securiteinfo.com - SKIPPED SecuriteInfo securiteinfo.hdb update
janv. 07 05:53:30 WARNING - Failed curl connection to clamav.securiteinfo.com - SKIPPED SecuriteInfo securiteinfobat.hdb update
janv. 07 05:53:45 WARNING - Failed curl connection to clamav.securiteinfo.com - SKIPPED SecuriteInfo securiteinfodos.hdb update
janv. 07 05:54:09 WARNING - Failed curl connection to clamav.securiteinfo.com - SKIPPED SecuriteInfo securiteinfohtml.hdb update
janv. 07 05:54:24 WARNING - Failed curl connection to clamav.securiteinfo.com - SKIPPED SecuriteInfo securiteinfooffice.hdb update
janv. 07 05:54:39 WARNING - Failed curl connection to clamav.securiteinfo.com - SKIPPED SecuriteInfo securiteinfopdf.hdb update
janv. 07 09:49:29 WARNING - Failed curl connection to clamav.securiteinfo.com - SKIPPED SecuriteInfo securiteinfobat.hdb update
janv. 07 09:50:05 WARNING - Failed curl connection to clamav.securiteinfo.com - SKIPPED SecuriteInfo securiteinfooffice.hdb update
janv. 07 09:50:30 WARNING - Failed curl connection to clamav.securiteinfo.com - SKIPPED SecuriteInfo securiteinfosh.hdb update

This year I got similar errors on the 1st at 5:49 and 9:47, 3rd at 13:50 and 17:48, then 5th at 5:48 and 9:52 and finally on the 6th at 5:51 and 9:49.


-- System Information:
Debian Release: 8.0
  APT prefers testing
  APT policy: (990, 'testing'), (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.16.0-4-amd64 (SMP w/8 CPU cores)
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages clamav-unofficial-sigs depends on:
ii  bind9-host [host]  1:9.9.5.dfsg-7
ii  clamav             0.98.5+dfsg-3
ii  curl               7.38.0-3
ii  dnsutils           1:9.9.5.dfsg-7
ii  gnupg              1.4.18-6
ii  rsync              3.1.1-2+b1

clamav-unofficial-sigs recommends no packages.

Versions of packages clamav-unofficial-sigs suggests:
ii  clamav-daemon  0.98.5+dfsg-3

-- no debconf information