Topic: Clam av not updating New problem

[henry44]

Here is the problem:

I live in the US

I get e-mail to the admin account with just a subject, no message body

freshclam:Update Failed.


Below is the last bit of the clamd/current logs

I draw your attention to the first few lines as well as to the successful database reload notice.

Are these problems related?

How do I fix either/both?

Yes, I looked at the bug track for this, but that was a different cause with the same symptom.


2006-08-31 21:13:38.285161500 LibClamAV Warning: messageFindArgument: no '=' sign found in MIME header
2006-08-31 21:13:38.285525500 LibClamAV Warning: messageFindArgument: no '=' sign found in MIME header
2006-08-31 21:13:38.285572500 LibClamAV Warning: messageFindArgument: no '=' sign found in MIME header
2006-09-01 00:01:29.914923500 SelfCheck: Database status OK.
2006-09-01 00:38:55.170965500 SelfCheck: Database status OK.
2006-09-01 01:31:24.272924500 SelfCheck: Database status OK.
2006-09-01 02:02:01.021685500 SelfCheck: Database status OK.
2006-09-01 02:48:47.833547500 SelfCheck: Database status OK.
2006-09-01 03:20:02.963625500 SelfCheck: Database status OK.
2006-09-01 04:06:34.455511500 SelfCheck: Database status OK.
2006-09-01 04:15:15.094155500 /var/spool/qpsmtpd/1157109312:8019:0: HTML.Phishing.Bank-491 FOUND
2006-09-01 04:54:26.863268500 SelfCheck: Database status OK.
2006-09-01 05:14:40.333821500 Reading databases from /var/clamav
2006-09-01 05:14:44.518876500 Database correctly reloaded (67446 viruses)
2006-09-01 05:25:05.978247500 SelfCheck: Database status OK.
2006-09-01 05:59:17.479519500 SelfCheck: Database status OK.
2006-09-01 06:34:07.639475500 SelfCheck: Database status OK.
2006-09-01 07:09:05.989107500 SelfCheck: Database status OK.
2006-09-01 07:31:26.166573500 /var/spool/qpsmtpd/1157121077:8551:0: HTML.Phishing.Auction-101 FOUND
2006-09-01 07:39:20.267296500 SelfCheck: Database status OK.
2006-09-01 08:26:01.843069500 SelfCheck: Database status OK.
2006-09-01 09:01:22.199549500 SelfCheck: Database status OK.
2006-09-01 09:43:33.680305500 SelfCheck: Database status OK.
2006-09-01 10:30:10.722408500 SelfCheck: Database status OK.
2006-09-01 11:01:53.326161500 SelfCheck: Database status OK.
2006-09-01 11:33:26.526470500 SelfCheck: Database status OK.

Thanks...

Henry

[pfloor]

First of all, you are looking in the wrong log file.  You need to look at the freshclam logs.

Secondly, freshclam runs every hour.  I occasionally get these emails and they are almost always due to clamav servers being too busy.

These emails seem to come in waves.  I will get one or 2 a day for a couple of days and then they quit for a week.

Are you getting these emails every hour?

[henry44]

Thanks for the log re-direct. I looked at the freshclam logs and was able to synch the freshclam update failure with notice with error messages (servers out of synch, etc.) in the log.

The update failure notices seem to come in waves. Several for a day or so and then none for weeks.

Can you give me any insight into the other error message? The one about the libclam warning?

Thanks..........

Henry

[frond]

henry44

> Can you give me any insight into the other error message? The one about the libclam warning?

Your question was already previously answered, did you forget ?

Googling for this:
LibClamAV Warning: messageFindArgument: no '=' sign found in MIME header

found this:
http://forums.contribs.org/index.php?topic=32562.0

and I'm sure there would be many other applicable search results and answers if you took the time to read them.

Learn to use search it's a good way to get answers.

[henry44]

Dear Frond,

Thank you for your response.

Having read that reply when it was posted, and remembering it very well, I ignored it when I searched the posts in this forum, the bug tracker and google. I wanted more information about this particular error message as I had not seen it in the versions 4 through 6 that I have been using, just in version 7 final. I was looking for a way to see the actual e-mails that were causing this error message and did not find any information of use.

Now, do you have further information that would be of use to me?

Thanks for your time....

Henry

[frond]

henry44

> I had not seen it in the versions 4 through 6

It happens in sme6. It's not sme version specific as it is related to the message format.
"Clamav has scanned your mail-messages and tells you there's something wrong with the format of some of them. Most times you won't notice it when you read your mail."

> I was looking for a way to see the actual e-mails that were causing this > error message and did not find any information of use.

You should have asked that question in the first place then.


> Now, do you have further information that would be of use to me?

It's a non issue, don't waste your time, as there will be little you can do about it anyway.

Go to the clamav site, you may find something useful there http://www.clamav.net/