clamav-users March 2008 archive
Main Archive Page > Month Archives  > clamav-users archives
clamav-users: [Clamav-users] Log file filling up with "Data

[Clamav-users] Log file filling up with "Database has not changed" messages

From: Jim Pye <jim.pye_at_nospam>
Date: Thu Mar 06 2008 - 04:51:17 GMT
To: clamav-users@lists.clamav.net


People

Apologies if this is a double post but I had some issues with mailman at this end :(         

I have just installed v0.92.1 of ClamAV and run up the clamd process. The log files are filling up with "Database has not changed" messages.         

The messages are every 10 seconds, as can be seen by the snippet Thu Mar 6 14:05:37 2008 -> Database has not changed Thu Mar 6 14:05:47 2008 -> Database has not changed Thu Mar 6 14:05:57 2008 -> Database has not changed Thu Mar 6 14:06:07 2008 -> Database has not changed Thu Mar 6 14:06:17 2008 -> Database has not changed Thu Mar 6 14:06:27 2008 -> Database has not changed Thu Mar 6 14:06:37 2008 -> Database has not changed Thu Mar 6 14:06:50 2008 -> Database has not changed Thu Mar 6 14:07:00 2008 -> Database has not changed Thu Mar 6 14:07:10 2008 -> Database has not changed Thu Mar 6 14:07:20 2008 -> Database has not changed

The .conf file has settings shown in the snippet below, some of them I changed to hardcode the defaults while trying to troubleshoot.         

Note other messages in the log such as freshclam notifications, email scans, virus detected are all appearing OK.         

################################
# Uncomment this option to enable logging.
# LogFile must be writable for the user running daemon.
# A full path is required.
# Default: disabled
# Uncommented and moved to same location as freshclam log JTP 20080305
#LogFile /var/log/clamd

LogFile /var/log/clamav/clamd.log        

# Maximum size of the log file.
# Value of 0 disables the limit.
# You may use 'M' or 'm' for megabytes (1M = 1m = 1048576 bytes)
# and 'K' or 'k' for kilobytes (1K = 1k = 1024 bytes). To specify the
 size
# in bytes just don't use modifiers.
# Default: 1M
# Made log file maxsize 5M JTP 20080305
#LogFileMaxSize 2M

LogFileMaxSize 5M

# Log time with each message.
# Default: no
# Uncommented - JTP 20080305
#LogTime yes

LogTime yes         

# Also log clean files. Useful in debugging but drastically increases
  the
# log size.
# Default: no
# Uncommented - JTP 20080305
#LogClean yes

LogClean yes         

# Use system logger (can work together with LogFile).
# Default: no
# Changed to no - JTP 20080305
#LogSyslog yes

LogSyslog no         

# Specify the type of syslog messages - please refer to 'man syslog'
# for facility names.
# Default: LOG_LOCAL6

LogFacility LOG_MAIL      

# Enable verbose logging.
# Default: no
#LogVerbose yes

LogVerbose no         

# Perform a database check.
# Default: 1800 (30 min)
#SelfCheck 600

SelfCheck 1800         

# Enable debug messages in libclamav.
# Default: no
#Debug yes

Debug no
#####################################

My thoughts were the Verbose and Debug logging which I have forced to no.         

Running on openSUSE 10.3 which is within a VMware session.         

Any other thoughts?         

Cheers
Jim -- Jim Pye PyeNet Universal _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html