[SOLVED] Freshclam not running after upgrade

[jriddle]

Hi,
After upgrading from 5.0.9 to 5.0.10 I noticed that Freshclam was not running every two hours to update the virus database.
The clamd log records the selfcheck every half hour, nothing else.
The freshclam log indicates ClamAV update process starts but it complains about an error with the log file. After two hours no virus database updates.

ClamAV update process started at Thu Oct 30 20:10:59 2008
ERROR: Problem with internal logger (UpdateLogFile = /opt/zimbra/log/freshclam.log).
WARNING: Your ClamAV installation is OUTDATED!
WARNING: Local version: 0.93.3 Recommended version: 0.94
DON'T PANIC! Read http://www.clamav.net/support/faq
Downloading main-48.cdiff [100%]
Downloading main-49.cdiff [100%]
main.cld updated (version: 49, sigs: 437972, f-level: 35, builder: sven)
WARNING: Your ClamAV installation is OUTDATED!
WARNING: Current functionality level = 33, recommended = 35
DON'T PANIC! Read http://www.clamav.net/support/faq
WARNING: getfile: daily-7652.cdiff not found on remote server (IP: 155.98.64.86)
WARNING: getpatch: Can't download daily-7652.cdiff from db.us.clamav.net
WARNING: getfile: daily-7652.cdiff not found on remote server (IP: 155.98.64.86)
WARNING: getpatch: Can't download daily-7652.cdiff from db.us.clamav.net
WARNING: getfile: daily-7652.cdiff not found on remote server (IP: 155.98.64.86)
WARNING: getpatch: Can't download daily-7652.cdiff from db.us.clamav.net
WARNING: Incremental update failed, trying to download daily.cvd
Downloading daily.cvd [100%]
daily.cvd updated (version: 8545, sigs: 17496, f-level: 35, builder: ccordes)
WARNING: Your ClamAV installation is OUTDATED!
WARNING: Current functionality level = 33, recommended = 35
DON'T PANIC! Read http://www.clamav.net/support/faq
Database updated (455468 signatures) from db.us.clamav.net (IP: 155.98.64.86)
Clamd successfully notified about the update.

The freshclam.log file exists in /opt/zimbra/log with permissions 640, owned by zimbra. There isn't a freshclam process id file in the log directory, so I conclude that the freshclam process isn't starting up. How can I get the ClamAV virus updates working again?

Any help is appreciated,
Justin

[uxbod]

Welcome to the forums

ps aux | grep freshclam
su - zimbra
/opt/zimbra/clamav/bin/freshclam --config-file=/opt/zimbra/conf/freshclam.conf -d --checks=12

If you start it by hand does it show a error message ?

[jriddle]

Before starting by hand:

$ ps aux | grep freshclam
jriddle  22329  0.0  0.0   2876   808 pts/1    S+   12:05   0:00 grep freshclam

No errors to start it up... Output from ps:

ps aux | grep freshclam
zimbra   23171  0.1  0.0   2808  1164 ?        Ss   12:07   0:00 /opt/zimbra/clamav/bin/freshclam --config-file=/opt/zimbra/conf/freshclam.conf -d --checks=12

The antivirus logs look good. There's a pid file in the log directory. I'd say it's right. How do I get this to run upon zimbra server restart?

Thanks!
Justin

[uxbod]

Now its running, are you in a position to shutdown ZCS and restart it to see if the daemon comes back online ?

su - zimbra
cd /opt/zimbra/bin
sh -x zmclamdctl stop
sh -x zmclamdctl start

post the output from the start so we can see what is happening, especially if the daemon does not start up.

[jriddle]

Restarted the server and the daemon didn't come up. Freshclam output the same message to its log. ClamAV got the virus databases, but after that initialization it didn't keep the daemon going.

$ ps aux | grep freshclam
zimbra   16409  0.0  0.0   1624   508 pts/1    S+   12:33   0:00 grep freshclam

clamd.log:

...
Fri Oct 31 12:25:53 2008 -> PDF support disabled.
Fri Oct 31 12:25:53 2008 -> HTML support enabled.
Fri Oct 31 12:25:53 2008 -> Self checking every 1800 seconds.
Fri Oct 31 12:26:16 2008 -> Reading databases from /opt/zimbra/data/clamav/db
Fri Oct 31 12:26:18 2008 -> Database correctly reloaded (455133 signatures)

freshclam.log:

ClamAV update process started at Fri Oct 31 12:25:49 2008
ERROR: Problem with internal logger (UpdateLogFile = /opt/zimbra/log/freshclam.log).
WARNING: Your ClamAV installation is OUTDATED!
WARNING: Local version: 0.93.3 Recommended version: 0.94
DON'T PANIC! Read http://www.clamav.net/support/faq
Downloading main-48.cdiff [100%]
Downloading main-49.cdiff [100%]
main.cld updated (version: 49, sigs: 437972, f-level: 35, builder: sven)
WARNING: Your ClamAV installation is OUTDATED!
WARNING: Current functionality level = 33, recommended = 35
DON'T PANIC! Read http://www.clamav.net/support/faq
WARNING: getfile: daily-7652.cdiff not found on remote server (IP: 199.184.215.2)
WARNING: getpatch: Can't download daily-7652.cdiff from db.us.clamav.net
WARNING: getfile: daily-7652.cdiff not found on remote server (IP: 199.184.215.2)
WARNING: getpatch: Can't download daily-7652.cdiff from db.us.clamav.net
WARNING: getfile: daily-7652.cdiff not found on remote server (IP: 199.184.215.2)
WARNING: getpatch: Can't download daily-7652.cdiff from db.us.clamav.net
WARNING: Incremental update failed, trying to download daily.cvd
Downloading daily.cvd [100%]
daily.cvd updated (version: 8549, sigs: 17502, f-level: 35, builder: ccordes)
WARNING: Your ClamAV installation is OUTDATED!
WARNING: Current functionality level = 33, recommended = 35
DON'T PANIC! Read http://www.clamav.net/support/faq
Database updated (455474 signatures) from db.us.clamav.net (IP: 199.184.215.2)
Clamd successfully notified about the update.

Any suggestions?

Sorry didn't read the code to restart just the clamav. Did just that and it did restart the daemon.

Thanks,
Justin

[jriddle]

Done, the daemon did restart. Will this be persistent if the server is restarted?

zmcontrol stop
zmcontrol start

Thanks,
Justin