Have you configured vscan to scan pdf files?
What's the output of vscanadm show?
Have you checked vscanadm stats before and after trying to open
the infected file?
Can you run vscan.d dtrace script and capture the output while
trying to open the infected file.
Chris Gerhard wrote:
Running the vscan service on a system it fails to spot a test virus in
a PDF file. The odd thing is that if I use the icap-client with the
file the same icap servers report the virus correctly.
for i in clam*
do
cat $i >/dev/null && echo $i
done
-ksh93: cat: clam-aspack.exe: cannot open [Permission denied]
-ksh93: cat: clam-fsg.exe: cannot open [Permission denied]
-ksh93: cat: clam-mew.exe: cannot open [Permission denied]
-ksh93: cat: clam-nsis.exe: cannot open [Permission denied]
-ksh93: cat: clam-pespin.exe: cannot open [Permission denied]
-ksh93: cat: clam-petite.exe: cannot open [Permission denied]
-ksh93: cat: clam-upack.exe: cannot open [Permission denied]
-ksh93: cat: clam-upx.exe: cannot open [Permission denied]
-ksh93: cat: clam-v2.rar: cannot open [Permission denied]
-ksh93: cat: clam-v3.rar: cannot open [Permission denied]
-ksh93: cat: clam-wwpack.exe: cannot open [Permission denied]
-ksh93: cat: clam.arj: cannot open [Permission denied]
-ksh93: cat: clam.bz2.zip: cannot open [Permission denied]
-ksh93: cat: clam.cab: cannot open [Permission denied]
-ksh93: cat: clam.chm: cannot open [Permission denied]
-ksh93: cat: clam.d64.zip: cannot open [Permission denied]
-ksh93: cat: clam.ea05.exe: cannot open [Permission denied]
-ksh93: cat: clam.ea06.exe: cannot open [Permission denied]
-ksh93: cat: clam.exe: cannot open [Permission denied]
-ksh93: cat: clam.exe.binhex: cannot open [Permission denied]
-ksh93: cat: clam.exe.bz2: cannot open [Permission denied]
-ksh93: cat: clam.exe.html: cannot open [Permission denied]
-ksh93: cat: clam.exe.mbox.base64: cannot open [Permission denied]
-ksh93: cat: clam.exe.mbox.uu: cannot open [Permission denied]
-ksh93: cat: clam.exe.rtf: cannot open [Permission denied]
-ksh93: cat: clam.exe.szdd: cannot open [Permission denied]
-ksh93: cat: clam.impl.zip: cannot open [Permission denied]
-ksh93: cat: clam.mail: cannot open [Permission denied]
-ksh93: cat: clam.ole.doc: cannot open [Permission denied]
clam.pdf
-ksh93: cat: clam.ppt: cannot open [Permission denied]
-ksh93: cat: clam.sis: cannot open [Permission denied]
-ksh93: cat: clam.tar.gz: cannot open [Permission denied]
-ksh93: cat: clam.tnef: cannot open [Permission denied]
-ksh93: cat: clam.zip: cannot open [Permission denied]
: pearson FSS 84 $;
: pearson FSS 84 $; for i in samba
localhost^Jdo^J/opt/cjgsw/bin/icap\-client>
for i in samba localhost
do
/opt/cjgsw/bin/icap\-client -f clam.pdf -s
"srv_clamav?allow204=on&force=on&sizelimit=off&mode=simple" -i $i |
grep VIRUS
done
ICAP server:samba, ip:192.168.1.20, port:1344
<H1>VIRUS FOUND</H1>
ICAP server:localhost, ip:127.0.0.1, port:1344
<H1>VIRUS FOUND</H1>
: pearson FSS 85 $;
_______________________________________________
cifs-discuss mailing list
[email protected]
http://mail.opensolaris.org/mailman/listinfo/cifs-discuss
