connect_error: getsockopt(SO_ERROR): fd=5 error=111: Connection refused

[Chris]

Periodically the last few days I'll see the above in my syslog when
freshclam is running. This is when polling the mirror at:

Jul 6 06:23:14 localhost freshclam[26748]: Retrieving
http://db.us.clamav.net/daily-13286.cdiff
Jul 6 06:23:15 localhost freshclam[26748]: connect_error:
getsockopt(SO_ERROR): fd=5 error=111: Connection refused
Jul 6 06:23:15 localhost freshclam[26748]: Can't connect to port 80 of
host db.us.clamav.net (IP: 88.198.67.125)
Jul 6 06:23:15 localhost freshclam[26748]: Trying to download
http://db.us.clamav.net/daily-13286.cdiff (IP: 208.72.56.53)
Jul 6 06:23:15 localhost freshclam[26748]: Downloading
daily-13286.cdiff [100%]

This happens every time there is a .cdiff to download. I run freshclam
once an hour at odd times using the freshclamcron script. Anyone have
any ideas why this may be happening? On the freshclam run that just
finished however it connected to fine to the ip that was showing a
connection refused.

Jul 6 18:23:35 localhost freshclam[7244]: Retrieving
http://db.us.clamav.net/daily-13289.cdiff
Jul 6 18:23:35 localhost freshclam[7244]: Trying to download
http://db.us.clamav.net/daily-13289.cdiff (IP: 88.198.67.125)
Jul 6 18:23:36 localhost freshclam[7244]: Downloading daily-13289.cdiff
[100%]

[fakessh @]

I attach no importance or

On Wed, 06 Jul 2011 19:17:39 -0500

Post by Chris
Periodically the last few days I'll see the above in my syslog when
Jul 6 06:23:14 localhost freshclam[26748]: Retrieving
http://db.us.clamav.net/daily-13286.cdiff
getsockopt(SO_ERROR): fd=5 error=111: Connection refused
Jul 6 06:23:15 localhost freshclam[26748]: Can't connect to port 80 of
host db.us.clamav.net (IP: 88.198.67.125)
Jul 6 06:23:15 localhost freshclam[26748]: Trying to download
http://db.us.clamav.net/daily-13286.cdiff (IP: 208.72.56.53)
Jul 6 06:23:15 localhost freshclam[26748]: Downloading
daily-13286.cdiff [100%]
This happens every time there is a .cdiff to download. I run freshclam
once an hour at odd times using the freshclamcron script. Anyone have
any ideas why this may be happening? On the freshclam run that just
finished however it connected to fine to the ip that was showing a
connection refused.
Jul 6 18:23:35 localhost freshclam[7244]: Retrieving
http://db.us.clamav.net/daily-13289.cdiff
Jul 6 18:23:35 localhost freshclam[7244]: Trying to download
http://db.us.clamav.net/daily-13289.cdiff (IP: 88.198.67.125)
Jul 6 18:23:36 localhost freshclam[7244]: Downloading daily-13289.cdiff
[100%]
--
Chris
KeyID 0xE372A7DA98E6705C
31.11°N 97.89°W (Elev. 1092 ft)
19:09:16 up 154 days, 48 min, 1 user, load average: 0.33, 0.21, 0.12

[Chris]

Post by Chris
Periodically the last few days I'll see the above in my syslog when
Jul 6 06:23:14 localhost freshclam[26748]: Retrieving
http://db.us.clamav.net/daily-13286.cdiff
getsockopt(SO_ERROR): fd=5 error=111: Connection refused
Jul 6 06:23:15 localhost freshclam[26748]: Can't connect to port 80 of
host db.us.clamav.net (IP: 88.198.67.125)
Jul 6 06:23:15 localhost freshclam[26748]: Trying to download
http://db.us.clamav.net/daily-13286.cdiff (IP: 208.72.56.53)
Jul 6 06:23:15 localhost freshclam[26748]: Downloading
daily-13286.cdiff [100%]
This happens every time there is a .cdiff to download. I run freshclam
once an hour at odd times using the freshclamcron script. Anyone have
any ideas why this may be happening? On the freshclam run that just
finished however it connected to fine to the ip that was showing a
connection refused.

Realizing I'm replying to myself however there were no replies to my
initial post. This continues with this same mirror.

Jul 14 15:27:00 localhost freshclam[1882]: Retrieving
http://db.us.clamav.net/bytecode-144.cdiff
Jul 14 15:27:01 localhost freshclam[1882]: connect_error:
getsockopt(SO_ERROR): fd=5 error=111: Connection refused
Jul 14 15:27:01 localhost freshclam[1882]: Can't connect to port 80 of
host db.us.clamav.net (IP: 88.198.67.125)

Jul 14 09:24:40 localhost freshclam[12074]: Retrieving
http://db.us.clamav.net/daily-13321.cdiff
Jul 14 09:24:40 localhost freshclam[12074]: connect_error:
getsockopt(SO_ERROR): fd=5 error=111: Connection refused
Jul 14 09:24:40 localhost freshclam[12074]: Can't connect to port 80 of
host db.us.clamav.net (IP: 88.198.67.125)

Jul 13 23:17:29 localhost freshclam[12508]: Retrieving
http://db.us.clamav.net/daily-13320.cdiff
Jul 13 23:17:30 localhost freshclam[12508]: connect_error:
getsockopt(SO_ERROR): fd=5 error=111: Connection refused
Jul 13 23:17:30 localhost freshclam[12508]: Can't connect to port 80 of
host db.us.clamav.net (IP: 88.198.67.125)

Anyone possibly have an idea why this is. I'm connecting hourly however
at odd times using the freshclamcron script. Though the .diff is
downloaded using a different mirror I'm curious why the connection to
the first one is refused.

Chris

[Chuck Swiger]

Post by Chris
Anyone possibly have an idea why this is. I'm connecting hourly however
at odd times using the freshclamcron script. Though the .diff is
downloaded using a different mirror I'm curious why the connection to
the first one is refused.

The webserver at IP 88.198.67.125 is down. I'm not entirely sure why it is being listed for db.us.clamav.net, since it appears to be located in Berlin, Germany via an ISP called hetzner.de....

Regards,

[Chris]

Post by Chuck Swiger

Post by Chris
Anyone possibly have an idea why this is. I'm connecting hourly however
at odd times using the freshclamcron script. Though the .diff is
downloaded using a different mirror I'm curious why the connection to
the first one is refused.

The webserver at IP 88.198.67.125 is down. I'm not entirely sure why it is being listed for db.us.clamav.net, since it appears to be located in Berlin, Germany via an ISP called hetzner.de....
Regards,

Thanks Chuck, odd though that I can ping that IP:

PING 88.198.67.125 (88.198.67.125) 56(84) bytes of data.
64 bytes from 88.198.67.125: icmp_seq=1 ttl=50 time=175 ms
64 bytes from 88.198.67.125: icmp_seq=2 ttl=50 time=176 ms
64 bytes from 88.198.67.125: icmp_seq=3 ttl=50 time=175 ms
64 bytes from 88.198.67.125: icmp_seq=4 ttl=50 time=175 ms
64 bytes from 88.198.67.125: icmp_seq=5 ttl=50 time=176 ms
64 bytes from 88.198.67.125: icmp_seq=6 ttl=50 time=176 ms
64 bytes from 88.198.67.125: icmp_seq=7 ttl=50 time=177 ms
64 bytes from 88.198.67.125: icmp_seq=8 ttl=50 time=175 ms
64 bytes from 88.198.67.125: icmp_seq=9 ttl=50 time=175 ms
64 bytes from 88.198.67.125: icmp_seq=10 ttl=50 time=175 ms
64 bytes from 88.198.67.125: icmp_seq=11 ttl=50 time=176 ms
64 bytes from 88.198.67.125: icmp_seq=12 ttl=50 time=175 ms

--- 88.198.67.125 ping statistics ---
12 packets transmitted, 12 received, 0% packet loss, time 11015ms
rtt min/avg/max/mdev = 175.553/176.090/177.336/0.663 ms

Maybe it's intermittent.

[Jim Preston]

Post by Chris

Post by Chuck Swiger

Post by Chris
Anyone possibly have an idea why this is. I'm connecting hourly however
at odd times using the freshclamcron script. Though the .diff is
downloaded using a different mirror I'm curious why the connection to
the first one is refused.

The webserver at IP 88.198.67.125 is down. I'm not entirely sure why it is being listed for db.us.clamav.net, since it appears to be located in Berlin, Germany via an ISP called hetzner.de....
Regards,

PING 88.198.67.125 (88.198.67.125) 56(84) bytes of data.
64 bytes from 88.198.67.125: icmp_seq=1 ttl=50 time=175 ms
64 bytes from 88.198.67.125: icmp_seq=2 ttl=50 time=176 ms
64 bytes from 88.198.67.125: icmp_seq=3 ttl=50 time=175 ms
64 bytes from 88.198.67.125: icmp_seq=4 ttl=50 time=175 ms
64 bytes from 88.198.67.125: icmp_seq=5 ttl=50 time=176 ms
64 bytes from 88.198.67.125: icmp_seq=6 ttl=50 time=176 ms
64 bytes from 88.198.67.125: icmp_seq=7 ttl=50 time=177 ms
64 bytes from 88.198.67.125: icmp_seq=8 ttl=50 time=175 ms
64 bytes from 88.198.67.125: icmp_seq=9 ttl=50 time=175 ms
64 bytes from 88.198.67.125: icmp_seq=10 ttl=50 time=175 ms
64 bytes from 88.198.67.125: icmp_seq=11 ttl=50 time=176 ms
64 bytes from 88.198.67.125: icmp_seq=12 ttl=50 time=175 ms
--- 88.198.67.125 ping statistics ---
12 packets transmitted, 12 received, 0% packet loss, time 11015ms
rtt min/avg/max/mdev = 175.553/176.090/177.336/0.663 ms
Maybe it's intermittent.

Ping is the first step in checking if a server is up. If it responds to
pings (if set to do so, many are not), then the next step is to be sure
that the web server itself is up and taking connections. This can be
done easily via telnet (web server URL or ip) 80. This will connect you
to the web server on port 80 if it is up and running. I use the telnet
option extensively when testing that a server is up and accepting
connections on specific service ports.

[Al Varnell]

Post by Chuck Swiger
The webserver at IP 88.198.67.125 is down. I'm not entirely sure why it is
being listed for db.us.clamav.net, since it appears to be located in Berlin,
Germany via an ISP called hetzner.de....

I asked a similar question last month about a Swedish mirror and was told it
is because there are an insufficient number of mirrors in the US to handle
the demand, so they are supplemented by several off-shore mirrors (currently
six in ES, 3-DE, RU & SE). The mirror in question, which I believe is
clamav.akxnet.de, is relatively new to the mix, replacing one in Virginia
that must have been dropped.

It seems to have recovered at this time according to
<http://www.clamav.net/mirrors.html>


-Al-