Clam AV Antivirus

[ansj64]

Hi

I have QTS 4.1.0 firmware on my TS-212P.

I set the update for the antivirus software included automatically and it has worked well until two days ago when it could not do the update. Was wondering if anybody else is having issues with it if they use it.

Best rgds

Ansj64

[Raid]

Have had AV off for about a year so I turned it back on and the AV version date does not update.
Would be a good idea to log a ticket.

Edit

Gave AV a very small job to do this morning and 5 hours later its still not finished. I also see that both my Physical and Swap Memory are both very low. Looks like the AV may be dead?

Update.

After 24 hours the AV Scan didn't complete so I turned in off. My memory use hasn't improved much, so will wait until I can do a reboot to fix that issue.

[Toxic17]

same issue here since 26th. however manual update seems to work fine so i am guessing the issue is the update time perhaps.

[doktornotor]

Code: Select all

/etc/init.d/antivirus.sh update_db

Post the entire output here.

[Toxic17]

it gave me no output. took about 30-45 Seconds to run.

[~] # /etc/init.d/antivirus.sh update_db
[~] #

[Toxic17]

it gave me no output. took about 30-45 Seconds to run.

[~] # /etc/init.d/antivirus.sh update_db
[~] #

[doktornotor]

it gave me no output. took about 30-45 Seconds to run.

[~] # /etc/init.d/antivirus.sh update_db
[~] #

Good. Now, re-check the virus defs date in the GUI.

[Toxic17]

The date was yesterday when it updated. Had no warning this morning in error logs.

I had raised a ticket with qnap on friday and they said they were looking into the issue.

Sent from my OnePlus One using Tapatalk

[Toxic17]

got the usual dumb reply...

If the Turbo NAS is configured to use a static IP address, check if the DNS settings are correct in [System Settings] > [Network]. If you are not sure about the DNS address, contact your ISP (Internet Service Provider) or use Google DNS server, 8.8.8.8 and 4.4.4.4.

This will resolve your AntiVirus update issue.

I then got another email:

We have already started looking in to this issue. It will take some time to fix it. In future releases, you will not see such issues.

You have any further queries, please let us know. If not, may i go ahead and close the ticket.

[doktornotor]

The QNAP support reply makes no sense whatsoever. If manually running the exact same script does update your virus defs, DNS most certainly is NOT an issue here. Can you provide the output of

Code: Select all

crontab -l | grep antivirus

[Toxic17]

The QNAP support reply makes no sense whatsoever. If manually running the exact same script does update your virus defs, DNS most certainly is NOT an issue here. Can you provide the output of

Code: Select all

crontab -l | grep antivirus

qnap are renowned for making no sense;)

here's the crontab line.

0 0 */1 * * /etc/init.d/antivirus.sh update_db

I was thinking of manually changing the time to something other that 00:00 hrs just to see if it is a time issue.

[Toxic17]

OK the issue is in time when it is initiated crontab.

I ran the update in crontab at 2:30 for 3 days and AV updated fine. last night I changed back to midnight and the AV failed again.

[doktornotor]

OK the issue is in time when it is initiated crontab.

Bingo. They are hammering the update server at midnight. Additionally, hardcoded in the init script and not configurable via GUI.

[Toxic17]

OK the issue is in time when it is initiated crontab.

Bingo. They are hammering the update server at midnight. Additionally, hardcoded in the init script and not configurable via GUI.

yep but this is Midnight GMT+1 (BST) hardly as much traffic as the US i would guess. maybe ClamAV limits the amount of connections to the servers. i'll set the crontab manually to 02:30 for the time being.

[doktornotor]

Even the "top of the hour" (at 0 minutes) is a serious issue... There's actually daemon mode for freshclam that randomizes these times by using a random sleep before actually running the update. Other possibility of course it to randomize it in the init script creating the crontab entires. Having no settings for this in GUI also does not help. Most certainly, DNS is not the issue. Maybe forward this to the support guys.