Re: question about freshclam log output
Newcomer01 via clamav-users <[email protected]> Fri, 03 Oct 2025 18:38:33 +0000
| Newsgroups | gmane.comp.security.virus.clamav.user |
|---|---|
| Message-ID | <[email protected]> |
yes, it seems that Ubuntu changes ClamAV really much, some other log entries also missing here, in the original Software they are included ... Von / From: Orion Poplawski Via Clamav-Users <mailto:[email protected]> An / To: Newcomer01 <mailto:[email protected]> CC / CC: Orion Poplawski <mailto:[email protected]> Gesendet / Sent: Freitag, Oktober 03, 2025 um 20:05 (at 08:05 PM) +0200 Betreff / Subject: [clamav-users] question about freshclam log output > On EL9 with clamav 1.4.3-2.el9 freshclam in daemon mode reports: > > Received signal: wake up > ClamAV update process started at Fri Oct 3 09:09:56 2025 > daily.cld database is up-to-date (version: 27780, sigs: 2076928, f-level: 90, > builder: tomjudge) > main.cvd database is up-to-date (version: 62, sigs: 6647427, f-level: 90, > builder: sigmgr) > bytecode.cvd database is up-to-date (version: 339, sigs: 80, f-level: 90, > builder: nrandolp) > -------------------------------------- > Received signal: wake up > ClamAV update process started at Fri Oct 3 11:09:56 2025 > daily.cld database is up-to-date (version: 27780, sigs: 2076928, f-level: 90, > builder: tomjudge) > main.cvd database is up-to-date (version: 62, sigs: 6647427, f-level: 90, > builder: sigmgr) > bytecode.cvd database is up-to-date (version: 339, sigs: 80, f-level: 90, > builder: nrandolp) > -------------------------------------- > > > On Ubuntu 22.04.5 with clamav 1.4.3+dfsg-0ubuntu0.22.04.1 freshclam in daemon > mode we see: > > > daily.cld database is up-to-date (version: 27779, sigs: 2076925, f-level: 90, > builder: raynman) > main.cld database is up-to-date (version: 62, sigs: 6647427, f-level: 90, > builder: sigmgr) > bytecode.cld database is up-to-date (version: 339, sigs: 80, f-level: 90, > builder: nrandolp) > daily.cld database is up-to-date (version: 27779, sigs: 2076925, f-level: 90, > builder: raynman) > main.cld database is up-to-date (version: 62, sigs: 6647427, f-level: 90, > builder: sigmgr) > bytecode.cld database is up-to-date (version: 339, sigs: 80, f-level: 90, > builder: nrandolp) > -------------------------------------- > daily.cld database is up-to-date (version: 27779, sigs: 2076925, f-level: 90, > builder: raynman) > main.cld database is up-to-date (version: 62, sigs: 6647427, f-level: 90, > builder: sigmgr) > bytecode.cld database is up-to-date (version: 339, sigs: 80, f-level: 90, > builder: nrandolp) > -------------------------------------- > > > So: > > Ubuntu does not output the "ClamAV update process started at DATE" message, > and also does not apppear to always output the "---" delimiter. It's the date > message that is of concern to use due to logwatch trying to parse it. > > The freshclam.conf files are essentially identical. Any idea what might cause > this difference? > > > _______________________________________________ > > Manage your clamav-users mailing list subscription / unsubscribe: > https://lists.clamav.net/mailman/listinfo/clamav-users > > > Help us build a comprehensive ClamAV guide: > https://github.com/Cisco-Talos/clamav-documentation > > https://docs.clamav.net/#mailing-lists-and-chat _______________________________________________ Manage your clamav-users mailing list subscription / unsubscribe: https://lists.clamav.net/mailman/listinfo/clamav-users Help us build a comprehensive ClamAV guide: https://github.com/Cisco-Talos/clamav-documentation https://docs.clamav.net/#mailing-lists-and-chat