[SOLVED] /opt/zimbra/log/clamd.log posted: Positive confirmation for ZCI shutdown?

[nadsab]

Hi,

Can anyone take a quick look at my below log, let me know if it's the 15 April 2010 anti-virus definitions - no longer update & ClamAV instance stop working situation
described in below url that has shut down my ZCI?

ClamAV - Updating clamd for releases earlier than ZCS 5.0.16 - Zimbra :: Wiki

I'm running ZImbra 5.0.2

Just want to make sure before I do the ClamAV upgrade.

Thanks.

Thu Apr 15 07:27:15 2010 -> SelfCheck: Database status OK.
Thu Apr 15 07:59:17 2010 -> SelfCheck: Database status OK.
Thu Apr 15 08:32:34 2010 -> SelfCheck: Database status OK.
Thu Apr 15 09:05:26 2010 -> SelfCheck: Database status OK.
Thu Apr 15 09:36:27 2010 -> SelfCheck: Database status OK.
Thu Apr 15 10:08:12 2010 -> SelfCheck: Database status OK.
Thu Apr 15 10:41:04 2010 -> SelfCheck: Database status OK.
Thu Apr 15 11:15:19 2010 -> SelfCheck: Database status OK.
Thu Apr 15 11:48:52 2010 -> SelfCheck: Database status OK.
Thu Apr 15 11:51:57 2010 -> Reading databases from /opt/zimbra/clamav/db
Thu Apr 15 11:52:20 2010 -> Database correctly reloaded (754390 signatures)
Thu Apr 15 12:20:12 2010 -> SelfCheck: Database status OK.
Thu Apr 15 12:51:49 2010 -> SelfCheck: Database status OK.
Thu Apr 15 13:33:08 2010 -> SelfCheck: Database status OK.
Thu Apr 15 13:51:54 2010 -> Reading databases from /opt/zimbra/clamav/db
Thu Apr 15 13:52:28 2010 -> Database correctly reloaded (754391 signatures)
Thu Apr 15 14:05:50 2010 -> SelfCheck: Database status OK.
Thu Apr 15 14:40:30 2010 -> SelfCheck: Database status OK.
Thu Apr 15 15:12:07 2010 -> SelfCheck: Database status OK.
Thu Apr 15 15:44:52 2010 -> SelfCheck: Database status OK.
Thu Apr 15 15:51:43 2010 -> Reading databases from /opt/zimbra/clamav/db
Thu Apr 15 15:51:43 2010 -> ERROR: reload db failed: Malformed database
Thu Apr 15 15:51:43 2010 -> Terminating because of a fatal error.
Thu Apr 15 15:51:43 2010 -> Pid file removed.
Thu Apr 15 15:51:43 2010 -> --- Stopped at Thu Apr 15 15:51:43 2010
Thu Apr 15 15:52:51 2010 -> +++ Started at Thu Apr 15 15:52:51 2010
Thu Apr 15 15:52:51 2010 -> clamd daemon 0.92 (OS: linux-gnu, ARCH: x86_64, CPU: x86_64)
Thu Apr 15 15:52:51 2010 -> Log file size limited to 20971520 bytes.
Thu Apr 15 15:52:51 2010 -> Reading databases from /opt/zimbra/clamav/db
Thu Apr 15 15:52:51 2010 -> Not loading PUA signatures.
Thu Apr 15 15:52:51 2010 -> ERROR: Malformed database
Thu Apr 15 15:55:01 2010 -> +++ Started at Thu Apr 15 15:55:01 2010
Thu Apr 15 15:55:01 2010 -> clamd daemon 0.92 (OS: linux-gnu, ARCH: x86_64, CPU: x86_64)
Thu Apr 15 15:55:01 2010 -> Log file size limited to 20971520 bytes.
Thu Apr 15 15:55:01 2010 -> Reading databases from /opt/zimbra/clamav/db
Thu Apr 15 15:55:01 2010 -> Not loading PUA signatures.
Thu Apr 15 15:55:02 2010 -> ERROR: Malformed database
Thu Apr 15 15:57:12 2010 -> +++ Started at Thu Apr 15 15:57:12 2010
Thu Apr 15 15:57:12 2010 -> clamd daemon 0.92 (OS: linux-gnu, ARCH: x86_64, CPU: x86_64)
Thu Apr 15 15:57:12 2010 -> Log file size limited to 20971520 bytes.
Thu Apr 15 15:57:12 2010 -> Reading databases from /opt/zimbra/clamav/db
Thu Apr 15 15:57:12 2010 -> Not loading PUA signatures.
Thu Apr 15 15:57:12 2010 -> ERROR: Malformed database
Thu Apr 15 15:59:23 2010 -> +++ Started at Thu Apr 15 15:59:23 2010
Thu Apr 15 15:59:23 2010 -> clamd daemon 0.92 (OS: linux-gnu, ARCH: x86_64, CPU: x86_64)
Thu Apr 15 15:59:23 2010 -> Log file size limited to 20971520 bytes.
Thu Apr 15 15:59:23 2010 -> Reading databases from /opt/zimbra/clamav/db
Thu Apr 15 15:59:23 2010 -> Not loading PUA signatures.
Thu Apr 15 15:59:23 2010 -> ERROR: Malformed database

[raj]

yes..your server is down due to CLAMAV EOL..
I have read all your other posts and given you the link for the fix in your first post...
http://www.zimbra.com/forums/adminis...tml#post180142

please apply the fix as told in the wiki so your server can be up.

Thanks
Raj

[nadsab]

Thanks very much Raj,

Is there any problem, compatability or otherwise, in installing the newest version of Clam on my older version of ZCI 5.0.2?

Not sure if I want to do a complete upgrade of ZImbra yet...

Also, how can I check to see if I already have daily update #10749?

[vavai]

Originally Posted by nadsab

Thanks very much Raj,

Is there any problem, compatability or otherwise, in installing the newest version of Clam on my older version of ZCI 5.0.2?

Not sure if I want to do a complete upgrade of ZImbra yet...

Also, how can I check to see if I already have daily update #10749?

I'm updating ClamAV version into 0.95.1 and 0.96 on Zimbra 5.0.x without problem, without do an upgrade of Zimbra (Actually, upgrade is my option but not now )

Open /opt/zimbra/log/freshclam.log if you want to check that you have an update of ClamAV version and have the latest daily update.