David Woolley wrote:
Hi Dennis,
Have I done something to offend you?
Not at all.
I have posted to this list to ask for help with an issue that the developers of
the Linux distro I use have marked as WONTFIX because they identify it to be a
bug in ClamAV.
You are not obliged to answer, yet you have done so twice with rather cryptic
replies that don't really move the discussion forward.
You have a system that is crashing when being scanned. Someone suggested
there is a bug that pops up when scanning a large file. You suggested
you'd exclude large files (not an easy task). I suggested you scan only
large files to test the validity of the bug (because this is fairly
easy!) rather than screw around trying to ignore them. Then you ask
where you can find large files. The obvious answer is, if this is your
problem then the large files are on your file system, don'tcha think?
And if your system is logging it could even tell you what files it is
choking on, maybe. And even if you don't catch them in your log you can
still create them from existing files in a quick test as in:
cat /usr/bin/l* >/tmp/large_test_file, or
tar cf /tmp/large_test_file /usr/bin/l*
I am a newbie to the cli of the clam family, but I am not an idiot.
I have previously run clamscan --help and man clamscan. I haven't found my
answer there.
That is impossible. Did you see any reference to what you were looking
for? If not it does not exist. Or are you suggesting there are hidden
options that the developers are keeping from you?
DP> Let us know.
FYI, Noel Jones has already provided an answer to our shared query:-
Is there a MaxFileSize or MinFileSize command line switch?
NJ> No. This would normally be done with whatever command
NJ> starts clamscan, eg. find / -type f -size -N | xargs clamscan
Thank you
You can run clamscan directly from the command line in a very controlled
test on a file or files you specifically choose. Zip or tar files, for
example, can be particularly interesting to examine especially if they
contain other zip or tar files. I don't think you're an idiot but you're
not putting a lot of thought into this debugging process. What I gave
you were hints but apparently you need to be spoon fed.
dp
_______________________________________________
http://lurker.clamav.net/list/clamav-users.html
