Still not behaving. The scan reflects number of bytes scanned versus number of bytes read.
I did get the warning I set the max filesize too large and it reset it to 4 GB for me, which, I think, is fine. Could someone please validate/verify mbox file scanning _does_ work with 0.97.7? Thanks. Scott On Wed, Apr 10, 2013 at 8:01 PM, A K Varnell <[email protected]> wrote: > > On Apr 10, 2013, at 4:59 PM, A K Varnell <[email protected]> wrote: > > > On Apr 10, 2013, at 4:41 PM, Scott Ehrlich <[email protected]> > wrote: > > > >> You may be correct, though recalling my command-line options, including > >> verbose mode, the mbox file is very large, yet the scan took just a few > >> seconds. > > > > Then you'll need to change: > > > > --max-filesize=#n > > Extract and scan at most #n kilobytes from each archive. > You may > > pass the value in megabytes in format xM or xm, where x > is a > > number. This option protects your system against DoS > attacks > > (default: 25 MB, max: <4 GB) > > Sorry, wrong reference: > > --max-scansize=#n > Extract and scan at most #n kilobytes from each scanned > file. > You may pass the value in megabytes in format xM or xm, > where x > is a number. This option protects your system against > DoS > attacks (default: 100 MB, max: <4 GB) > > -Al- > > >> ... > >> Scott > >> > >> > >> On Wed, Apr 10, 2013 at 5:41 PM, Steven Morgan <[email protected] > >wrote: > >> > >>> Scott, > >>> > >>> Looking at the code, I think the option is 'scan-mail'. It defaults as > yes, > >>> so you shouldn't need to do anything special, just clamscan > /path/to/mbox/. > >>> > >>> Let us know if that is not working. > >>> > >>> Steve > >>> > >>> On Wed, Apr 10, 2013 at 4:46 PM, Scott Ehrlich < > [email protected] > >>>> wrote: > >>> > >>>> I just compiled clamav 0.97.7 on SANS SIFT Linux. > >>>> > >>>> Reviewing the README file and google, it appears that clamscan should > be > >>>> able to review/scan mbox files, but any attempt at using --mbox, such > as > >>>> clamscan --mbox or clamscan -d /tmp/virdir --mbox /path/to/mboxfile, > >>>> reports an error with the --mbox switch. > >>>> > >>>> I reviewed the configuration file, and there was nothing for mbox > >>> support. > >>>> > >>>> Am I missing something? > >>>> > >>>> Thanks. > >>>> > >>>> Scott > >>>> _______________________________________________ > >>>> Help us build a comprehensive ClamAV guide: visit > http://wiki.clamav.net > >>>> http://www.clamav.net/support/ml > >>>> > >>> _______________________________________________ > >>> Help us build a comprehensive ClamAV guide: visit > http://wiki.clamav.net > >>> http://www.clamav.net/support/ml > >>> > >> _______________________________________________ > >> Help us build a comprehensive ClamAV guide: visit > http://wiki.clamav.net > >> http://www.clamav.net/support/ml > > > > _______________________________________________ > > Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net > > http://www.clamav.net/support/ml > > _______________________________________________ > Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net > http://www.clamav.net/support/ml > _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
