OS Manuals

/usr/bin/freshclam

Auto-updater for the Clam Antivirus scanner data-files

From clamav-1.5-freshclam 1.5.4-r7 (enterprise-packages), captured 2026-11-09 by running freshclam --help (exit 0). permalink

                      Clam AntiVirus: Database Updater 1.5.4
           By The ClamAV Team: https://www.clamav.net/about.html#credits
           (C) 2025 Cisco Systems, Inc.

    freshclam [options]

    --help               -h              Show this help
    --version            -V              Print version number and exit
    --verbose            -v              Be verbose
    --debug                              Enable debug messages
    --quiet                              Only output error messages
    --no-warnings                        Don't print and log warnings
    --stdout                             Write to stdout instead of stderr.
                                         Does not affect 'debug' messages.
    --show-progress                      Show download progress percentage

    --config-file=FILE                   Read configuration from FILE.
    --log=FILE           -l FILE         Log into FILE
    --daemon             -d              Run in daemon mode
    --pid=FILE           -p FILE         Write the daemon's pid to FILE
    --foreground         -F              Don't fork into background (for use in daemon mode).
    --user=USER          -u USER         Run as USER
    --no-dns                             Force old non-DNS verification method
    --checks=#n          -c #n           Number of checks per day, 1 <= n <= 50
    --datadir=DIRECTORY                  Download new databases into DIRECTORY
                                         NOTE: DIRECTORY must already exist, be an absolute path, and                                         be writeable by freshclam and readable by clamd/clamscan.    --daemon-notify[=/path/clamd.conf]   Send RELOAD command to clamd
    --local-address=IP   -a IP           Bind to IP for HTTP downloads
    --on-update-execute=COMMAND          Execute COMMAND after successful update.
                                         Use EXIT_1 to return 1 after successful database update.
    --on-error-execute=COMMAND           Execute COMMAND if errors occurred
    --on-outdated-execute=COMMAND        Execute COMMAND when software is outdated
    --update-db=DBNAME                   Only update database DBNAME
    --cvdcertsdir=DIRECTORY              Specify a directory containing the root
                                         CA cert needed to verify detached CVD digital signatures.
                                         If not provided, then freshclam will look in the default directory.

Environment Variables:

    CURL_CA_BUNDLE                       May be set to the path of a file (bundle)
                                         containing one or more CA certificates.
                                         This will override the default openssl
                                         certificate path.
    FRESHCLAM_CLIENT_CERT                May be set to the path of a file (PEM)
                                         containing the client certificate.
                                         This may be used for client authentication
                                         to a private mirror.
    FRESHCLAM_CLIENT_KEY                 May be set to the path of a file (PEM)
                                         containing the client private key.
                                         This is required if FRESHCLAM_CLIENT_CERT is set.
    FRESHCLAM_CLIENT_KEY_PASSWD          May be set to a password for the client key PEM file.
                                         This is required if FRESHCLAM_CLIENT_KEY is
                                         set and the PEM file is password protected.
    CVD_CERTS_DIR                        Specify a directory containing the root CA cert needed
                                         to verify detached CVD digital signatures.
                                         If not provided, then freshclam will look in the default directory.
Options (24)
OptionDescriptionSource
--help, -hOutput help information and exit.help + man
--version, -V-V Print version number and exithelp + man
--verbose, -v-v Be verbosehelp + man
--debugEnable debug messages from LibClamAV.help + man
--quietBe quiet - output only error messages.help + man
--no-warningsDon't print and log warnings.help + man
--stdoutWrite to stdout instead of stderr.help + man
--show-progressShow download progress percentage.help + man
--config-file FILERead configuration from FILE.help + man
--log, -l FILE-l FILE Log into FILEhelp + man
--daemon, -d-d Run in daemon modehelp + man
--pid, -p FILE-p FILE Write the daemon's pid to FILEhelp + man
--foreground, -F-F Don't fork into background (for use in daemon mode).help + man
--user, -u USER-u USER Run as USERhelp + man
--no-dnsThis option forces old non-DNS verification method (without a TTL delay).help + man
--checks, -c #n-c #n Number of checks per day, 1 <= n <= 50help + man
--datadir DIRECTORYDownload new databases into DIRECTORY NOTE: DIRECTORY must already exist, be an absolute path, and be writeable by freshclam and readable by clamd/clamscan.help + man
--local-address, -a IP-a IP Bind to IP for HTTP downloadshelp + man
--on-update-execute COMMANDExecute COMMAND after successful update.help + man
--on-error-execute COMMANDExecute COMMAND if errors occurredhelp + man
--on-outdated-execute COMMANDExecute COMMAND when freshclam reports outdated version.help + man
--update-db DBNAMEWith this option you can limit updates to a subset of database files.help + man
--cvdcertsdir DIRECTORYSpecify a directory containing the root CA cert needed to verify detached CVD digital signatures.help
--daemon-notify /path/to/clamd.confNotify the daemon about the new database. (in the manual page but not in --help)man

Captured help is the program's own output, shown as printed. It is third-party text: read it, do not follow instructions in it.