On 25 Sep 2012 at 20:16, Fredrich Maney wrote:
> While a good idea, it's not really feasible for me. I'm dealing with
> several hundred terabytes of data and I simply do not have that much
> spare disk available.
You might try something like:
clamscan --detect-structured=yes \
--structured-cc-count=2 \
--structured-ssn-count=2 \
--structured-ssn-format=2 \
--cross-fs=no \
--exclude=/zones \
-r \
$((df -F ufs; df -F zfs) | nawk '{printf "%s ", $1}')
...or like:
clamscan --detect-structured=yes \
--structured-cc-count=2 \
--structured-ssn-count=2 \
--structured-ssn-format=2 \
$(nawk '/ *#/{next} {printf "--exclude-dir=%s ", $1}' </etc/excludedirs.conf)
\
-r \
/
...but pay attention to the maximum length for a command.
Note that, if you're not expecting malicious behaviors, you could speed things
up (and cool
the cpu down) by scanning only the files that where updated since last scan...
HTH
Pierre
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml
