Have you tried watching network traffic with Wireshark (or TCPdump) for both 
the telnet and Java attempts? Perhaps that would show something. E.g., the Java 
client doesn't send anything, or does send something but it's wrong.

And, of course, if you also run clamdscan itself, you can see what the correct 
interaction is.

P.S. I find Wireshark gives much more detail than TCPdump, and you can even 
change what you look at after the fact, if you capture a PCAP output file 
during the test.


On Wed, 3 Dec 2025 17:46:36 +0200
Lior Koskas via clamav-users <[email protected]> wrote:

> Hi,
> 
> I'm running ClamAv on Kubernetes. The image tag is clamav/clamav:1.5.1. I
> have a Java app based SpringBoot that communicates with ClamAV.
> When I'm trying to scan a file using my Java app The app hangs up at this
> line:
> 
> ClamavClient clamScan = new ClamavClient(url, port);
> 
> clamScan.ping(); // hangs up
> 
> When I'm running the telnet command to my URL the command run as expected.
> 
> My clamd config file:
> 
> ##############################
> # Network Settings (TCP mode)
> ##############################
> TCPSocket 3310
> TCPAddr 0.0.0.0
> LocalSocket /run/clamav/clamd.sock
> LocalSocketGroup clamav
> LocalSocketMode 666
> 
> ##############################
> # Logging
> ##############################
> # LogFile /var/log/clamav/clamd.log
> LogFileUnlock yes
> LogTime yes
> LogVerbose no            # Change to "yes" for debug
> ExtendedDetectionInfo yes
> LogVerbose yes  # Enable verbose for debugging
> 
> ##############################
> # Performance & Limits
> ##############################
> MaxScanSize 200M
> MaxFileSize 100M
> StreamMaxLength 150M
> MaxRecursion 20
> MaxFiles 10000
> MaxScanTime 120000        # 120 seconds
> ReadTimeout 120
> IdleTimeout 60
> 
> ##############################
> # Heuristics / Features
> ##############################
> ScanArchive yes
> ScanOLE2 yes
> ScanPDF yes
> ScanSWF yes
> ScanHWP3 yes
> HeuristicScanPrecedence yes
> 
> ##############################
> # Misc
> ##############################
> Foreground yes
> User clamav
> SelfCheck 3600           # Every 60 minutes
> 
> My freshclam config file:
> 
> ###############
> # Database Updates
> ###############
> DatabaseOwner clamav
> Checks 12   # every 2 hours
> 
> DatabaseMirror database.clamav.net
> DNSDatabaseInfo current.cvd.clamav.net
> 
> ###############
> # Logging
> ###############
> UpdateLogFile /var/log/clamav/freshclam.log
> LogVerbose yes
> 
_______________________________________________

Manage your clamav-users mailing list subscription / unsubscribe:
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/Cisco-Talos/clamav-documentation

https://docs.clamav.net/#mailing-lists-and-chat

Reply via email to