[clamav-users] What is the maximum file size ClamAV supports ??
Hi All, I have tried to scan the file which is of 75 MB file.. I need to know whether it is scanned or not. Because Data Scanned is coming as 0.00 MB. Please help me in this regard. I have to proceed further. [root@mySys clamav]# clamscan clamav-0.97.tar LibClamAV Warning: ** LibClamAV Warning: *** The virus database is older than 7 days! *** LibClamAV Warning: *** Please update it as soon as possible.*** LibClamAV Warning: ** clamav-0.97.tar: OK --- SCAN SUMMARY --- Known viruses: 1263908 Engine version: 0.97.5 Scanned directories: 0 Scanned files: 1 Infected files: 0 *Data scanned: 0.00 MB* Data read: 75.66 MB (ratio 0.00:1) Time: 2.416 sec (0 m 2 s) What is the maximum file size ClamAV supports ?? Please reply with the maximum file size limit. I couldn't found this information in google. Thanks in Advance for your help. -- Regards, *R.Siranjeevi** **| MCA @ PSG Tech* - Count the flowers of your garden, NOT the leafs which falls away! ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
Re: [clamav-users] What is the maximum file size ClamAV supports ??
On Fri, Sep 14, 2012 at 10:05 AM, Siranjeevi siranjee...@gmail.com wrote: Hi All, I have tried to scan the file which is of 75 MB file.. I need to know whether it is scanned or not. Because Data Scanned is coming as 0.00 MB. Please help me in this regard. I have to proceed further. ---SNIP--- What is the maximum file size ClamAV supports ?? Please reply with the maximum file size limit. I couldn't found this information in google. You can however find the information in the man page ;) Look for --max-filesize and --max-scansize -- Please keep list traffic on the list. Rob MacGregor Whoever fights monsters should see to it that in the process he doesn't become a monster. Friedrich Nietzsche ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
Re: [clamav-users] What is the maximum file size ClamAV supports ??
On 9/14/12 2:05 AM, Siranjeevi siranjee...@gmail.com wrote: Hi All, I have tried to scan the file which is of 75 MB file.. I need to know whether it is scanned or not. Because Data Scanned is coming as 0.00 MB. Please help me in this regard. I have to proceed further. [root@mySys clamav]# clamscan clamav-0.97.tar LibClamAV Warning: ** LibClamAV Warning: *** The virus database is older than 7 days! *** LibClamAV Warning: *** Please update it as soon as possible.*** LibClamAV Warning: ** clamav-0.97.tar: OK --- SCAN SUMMARY --- Known viruses: 1263908 Engine version: 0.97.5 Scanned directories: 0 Scanned files: 1 Infected files: 0 *Data scanned: 0.00 MB* Data read: 75.66 MB (ratio 0.00:1) Time: 2.416 sec (0 m 2 s) What is the maximum file size ClamAV supports ?? Please reply with the maximum file size limit. I couldn't found this information in google. Thanks in Advance for your help. Run clamconf and check MaxScanSize. Probably 100M. Also, from man clamscan: --max-scansize=#n Extract and scan at most #n kilobytes from each scanned file. You may pass the value in megabytes in format xM or xm, where x is a number. This option protects your system against DoS attacks (default: 100 MB, max: 4 GB) However, if the file is an archive, then the MaxFileSize is probably 25M. -Al- -- Al Varnell Mountain View, CA ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
Re: [clamav-users] What is the maximum file size ClamAV supports ??
Hi All, I changed the items in clamd.conf MaxScanSize = 157286400 MaxFileSize = 104857600 But Still, the changes are not reflected in clamscan. I couldn't scan large files which is of 75MB in size. Please help me out. I didn't expect such a great response by you guys. Really ClamAV has so many active members who are contributing very well for its growth. I am a newbie. May be my questions seems to be silly. Please consider my question and I am expecting your replies. Thank You. On Fri, Sep 14, 2012 at 3:10 PM, Al Varnell alvarn...@mac.com wrote: On 9/14/12 2:05 AM, Siranjeevi siranjee...@gmail.com wrote: Hi All, I have tried to scan the file which is of 75 MB file.. I need to know whether it is scanned or not. Because Data Scanned is coming as 0.00 MB. Please help me in this regard. I have to proceed further. [root@mySys clamav]# clamscan clamav-0.97.tar LibClamAV Warning: ** LibClamAV Warning: *** The virus database is older than 7 days! *** LibClamAV Warning: *** Please update it as soon as possible.*** LibClamAV Warning: ** clamav-0.97.tar: OK --- SCAN SUMMARY --- Known viruses: 1263908 Engine version: 0.97.5 Scanned directories: 0 Scanned files: 1 Infected files: 0 *Data scanned: 0.00 MB* Data read: 75.66 MB (ratio 0.00:1) Time: 2.416 sec (0 m 2 s) What is the maximum file size ClamAV supports ?? Please reply with the maximum file size limit. I couldn't found this information in google. Thanks in Advance for your help. Run clamconf and check MaxScanSize. Probably 100M. Also, from man clamscan: --max-scansize=#n Extract and scan at most #n kilobytes from each scanned file. You may pass the value in megabytes in format xM or xm, where x is a number. This option protects your system against DoS attacks (default: 100 MB, max: 4 GB) However, if the file is an archive, then the MaxFileSize is probably 25M. -Al- -- Al Varnell Mountain View, CA ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml -- Regards, *R.Siranjeevi** **| MCA @ PSG Tech* - Count the flowers of your garden, NOT the leafs which falls away! ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
Re: [clamav-users] What is the maximum file size ClamAV supports ??
On Fri, Sep 14, 2012 at 8:59 AM, Siranjeevi siranjee...@gmail.com wrote: Hi All, I changed the items in clamd.conf MaxScanSize = 157286400 MaxFileSize = 104857600 But Still, the changes are not reflected in clamscan. I couldn't scan large files which is of 75MB in size. clamscan does not use the clamd.conf file. You need to pass any settings changes on the command line. Rob pointed out what the size-related command line options were. Probably --max-filesize=# will do the trick. If you use the --help command line option, clamscan will give you a detailed list of other options it supports in case they are relevant to your scans. Dave R. -- --- Dave Raynor Sourcefire Vulnerability Research Team dray...@sourcefire.com ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
Re: [clamav-users] Need Help
On Sep 14, 2012, at 1:54 AM, Siranjeevi siranjee...@gmail.com wrote: Hi All, I am working with ClamAV for nearly 2 months. Now i am trying to scan the files which are larger than 30 MB breaks in the middle and getting an error net.taldius.clamav.ScannerException: Error while initializing clamd data channel. I have used the API from the following website link : http://nsinfra.blogspot.in/2011/06/java-api-to-detect-virus-using-clamav.htmlhttp://nsinfra.blogspot.in/2011/06/java-api-to-detect-virus-using-clamav.html It is working fine and i could get results for the files which are of less than 30 MB. So, please let me know the root cause for the issue. I would be thankful if you could help me in this regard. As I said in my last email, the ClamAV team can't support a third party API, hopefully the author of that API is on this list. Otherwise you'll need to contact the author directly. -- Joel Esler Senior Research Engineer, VRT OpenSource Community Manager Sourcefire ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
Re: [clamav-users] What is the maximum file size ClamAV supports ??
Yes David. I can understand that now.. If i change in clamd.conf, can i get it reflected for daemon process. On Fri, Sep 14, 2012 at 6:52 PM, David Raynor dray...@sourcefire.comwrote: On Fri, Sep 14, 2012 at 8:59 AM, Siranjeevi siranjee...@gmail.com wrote: Hi All, I changed the items in clamd.conf MaxScanSize = 157286400 MaxFileSize = 104857600 But Still, the changes are not reflected in clamscan. I couldn't scan large files which is of 75MB in size. clamscan does not use the clamd.conf file. You need to pass any settings changes on the command line. Rob pointed out what the size-related command line options were. Probably --max-filesize=# will do the trick. If you use the --help command line option, clamscan will give you a detailed list of other options it supports in case they are relevant to your scans. Dave R. -- --- Dave Raynor Sourcefire Vulnerability Research Team dray...@sourcefire.com ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml -- Regards, *R.Siranjeevi** **| MCA @ PSG Tech* - Count the flowers of your garden, NOT the leafs which falls away! ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
Re: [clamav-users] Need Help
Yeah Joel Esler. Thank You. I was expecting the author to reply for my query. I really appreciate your replies to all mails. On Fri, Sep 14, 2012 at 7:14 PM, Joel Esler jes...@sourcefire.com wrote: On Sep 14, 2012, at 1:54 AM, Siranjeevi siranjee...@gmail.com wrote: Hi All, I am working with ClamAV for nearly 2 months. Now i am trying to scan the files which are larger than 30 MB breaks in the middle and getting an error net.taldius.clamav.ScannerException: Error while initializing clamd data channel. I have used the API from the following website link : http://nsinfra.blogspot.in/2011/06/java-api-to-detect-virus-using-clamav.html http://nsinfra.blogspot.in/2011/06/java-api-to-detect-virus-using-clamav.html It is working fine and i could get results for the files which are of less than 30 MB. So, please let me know the root cause for the issue. I would be thankful if you could help me in this regard. As I said in my last email, the ClamAV team can't support a third party API, hopefully the author of that API is on this list. Otherwise you'll need to contact the author directly. -- Joel Esler Senior Research Engineer, VRT OpenSource Community Manager Sourcefire ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml -- Regards, *R.Siranjeevi** **| MCA @ PSG Tech* - Count the flowers of your garden, NOT the leafs which falls away! ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
Re: [clamav-users] Clamav unable to detect trojan virus exe
On Fri, Sep 14, 2012 at 1:36 AM, gaurav singh gaurav.the.iiit...@gmail.comwrote: I have clamav with latest virus database on Ubuntu. When i try to scan a .exe file which is basically a trojan(detected by other anti-virus on Windows), it just passes as OK. Message with clamscan --debug logs following : ... LibClamAV debug: Ignoring signature Exploit.PDF-20301 LibClamAV debug: main.hdb loaded LibClamAV debug: Ignoring signature Worm.Sohanad-8 LibClamAV debug: Ignoring signature Adware.WhenU-6 LibClamAV debug: hashtab.c:Growing hashtable 0xb6e6ec70, because it has exceeded maxfill, old size:16384 LibClamAV debug: hashtab.c: new capacity: 32768 LibClamAV debug: Table 0xb6e6ec70 size after grow:32768 LibClamAV debug: Ignoring signature Trojan.Fakedoc-2 LibClamAV debug: Ignoring signature Trojan.Dropper-5055 LibClamAV debug: hashtab.c:Growing hashtable 0xb6e6ec70, because it has exceeded maxfill, old size:32768 LibClamAV debug: hashtab.c: new capacity: 65536 LibClamAV debug: Table 0xb6e6ec70 size after grow:65536 LibClamAV debug: Ignoring signature Trojan.Dropper-6931 LibClamAV debug: Ignoring signature Trojan.Agent-28377 LibClamAV debug: Ignoring signature Trojan.Dopper LibClamAV debug: Ignoring signature Trojan.Dropper-10500 LibClamAV debug: Ignoring signature Trojan.SdBot-9715 LibClamAV debug: Ignoring signature Trojan.Dropper-18547 LibClamAV debug: Ignoring signature Trojan.Agent-98408 LibClamAV debug: Ignoring signature Trojan.Agent-118736 ... Maybe it is ignoring signatures that's why it is not detecting virus. Please help. Thanks Gaurav Singh ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml The important part of the logs would be closer to the bottom where it is scanning the file. This log section is from engine initialization and signature loading. The ignored signatures within the CVD files are intentional and end up replaced by other more accurate signatures. That should not be the issue. If you come across malware that is not being detected you can send it to our team of sigmakers. You can find details online by going to http://www.clamav.net/ and clicking on the Submit a file link. Submissions help us improve detections. Thanks, Dave R. -- --- Dave Raynor Sourcefire Vulnerability Research Team dray...@sourcefire.com ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
Re: [clamav-users] What is the maximum file size ClamAV supports ??
I am getting error like this when i do clamdscan on a file or folder. What could be the reason for it ?? [root@mySys clamav]# clamdscan response /root/clamav/response: lstat() failed: Permission denied. ERROR --- SCAN SUMMARY --- Infected files: 0 Total errors: 1 Time: 0.171 sec (0 m 0 s) On Fri, Sep 14, 2012 at 7:15 PM, Siranjeevi siranjee...@gmail.com wrote: Yes David. I can understand that now.. If i change in clamd.conf, can i get it reflected for daemon process. On Fri, Sep 14, 2012 at 6:52 PM, David Raynor dray...@sourcefire.comwrote: On Fri, Sep 14, 2012 at 8:59 AM, Siranjeevi siranjee...@gmail.com wrote: Hi All, I changed the items in clamd.conf MaxScanSize = 157286400 MaxFileSize = 104857600 But Still, the changes are not reflected in clamscan. I couldn't scan large files which is of 75MB in size. clamscan does not use the clamd.conf file. You need to pass any settings changes on the command line. Rob pointed out what the size-related command line options were. Probably --max-filesize=# will do the trick. If you use the --help command line option, clamscan will give you a detailed list of other options it supports in case they are relevant to your scans. Dave R. -- --- Dave Raynor Sourcefire Vulnerability Research Team dray...@sourcefire.com ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml -- Regards, *R.Siranjeevi** **| MCA @ PSG Tech* - Count the flowers of your garden, NOT the leafs which falls away! -- Regards, *R.Siranjeevi** **| MCA @ PSG Tech* - Count the flowers of your garden, NOT the leafs which falls away! ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
Re: [clamav-users] What is the maximum file size ClamAV supports ??
On Fri, Sep 14, 2012 at 5:59 AM, Siranjeevi siranjee...@gmail.com wrote: I changed the items in clamd.conf MaxScanSize = 157286400 MaxFileSize = 104857600 But Still, the changes are not reflected in clamscan. I couldn't scan large files which is of 75MB in size. Did you mean clamdscan? Or are you actually using clamscan? clamscan is a standalone program which loads its own copy of the virus database and scans everything itself. clamdscan is a small program which connects to a running clamd daemon and asks the daemon to scan the files and waits for the answer. Which one you are using will have some bearing on what is recommended to you. I suggest first that you repeat your tests with clamdscan and see what changes, if anything. ...Todd -- The total budget at all receivers for solving senders' problems is $0. If you want them to accept your mail and manage it the way you want, send it the way the spec says to. --John Levine ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
Re: [clamav-users] What is the maximum file size ClamAV supports ??
Hi Todd, Thanks for explanation. Its really helpful for me to understand. Actually i have tried with clamdscan only. Clamscan command is working perfectly. I have struggled nearly 10 times and installed the ClamAV in my Cent OS 6. I have tried to install in many ways like using rpm, tar, and at last done with yum install. I am learning a lot from you guys. Thanks for replies. You people are really more dynamic than i ever expected. I am getting replies from different guys and it sounds good. Can i ask more questions over here know ?? On Fri, Sep 14, 2012 at 6:47 PM, Todd Lyons tly...@ivenue.com wrote: On Fri, Sep 14, 2012 at 5:59 AM, Siranjeevi siranjee...@gmail.com wrote: I changed the items in clamd.conf MaxScanSize = 157286400 MaxFileSize = 104857600 But Still, the changes are not reflected in clamscan. I couldn't scan large files which is of 75MB in size. Did you mean clamdscan? Or are you actually using clamscan? clamscan is a standalone program which loads its own copy of the virus database and scans everything itself. clamdscan is a small program which connects to a running clamd daemon and asks the daemon to scan the files and waits for the answer. Which one you are using will have some bearing on what is recommended to you. I suggest first that you repeat your tests with clamdscan and see what changes, if anything. ...Todd -- The total budget at all receivers for solving senders' problems is $0. If you want them to accept your mail and manage it the way you want, send it the way the spec says to. --John Levine ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml -- Regards, *R.Siranjeevi** **| MCA @ PSG Tech* - Count the flowers of your garden, NOT the leafs which falls away! ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
Re: [clamav-users] What is the maximum file size ClamAV supports ??
clamd.conf provides configurations for clamd(clamav daemon). Whereas clamscan does not take configuration setting from it. Use --max-scansize=#n and --max-filesize=#n instead. On Fri, Sep 14, 2012 at 6:29 PM, Siranjeevi siranjee...@gmail.com wrote: Hi All, I changed the items in clamd.conf MaxScanSize = 157286400 MaxFileSize = 104857600 But Still, the changes are not reflected in clamscan. I couldn't scan large files which is of 75MB in size. Please help me out. I didn't expect such a great response by you guys. Really ClamAV has so many active members who are contributing very well for its growth. I am a newbie. May be my questions seems to be silly. Please consider my question and I am expecting your replies. Thank You. On Fri, Sep 14, 2012 at 3:10 PM, Al Varnell alvarn...@mac.com wrote: On 9/14/12 2:05 AM, Siranjeevi siranjee...@gmail.com wrote: Hi All, I have tried to scan the file which is of 75 MB file.. I need to know whether it is scanned or not. Because Data Scanned is coming as 0.00 MB. Please help me in this regard. I have to proceed further. [root@mySys clamav]# clamscan clamav-0.97.tar LibClamAV Warning: ** LibClamAV Warning: *** The virus database is older than 7 days! *** LibClamAV Warning: *** Please update it as soon as possible.*** LibClamAV Warning: ** clamav-0.97.tar: OK --- SCAN SUMMARY --- Known viruses: 1263908 Engine version: 0.97.5 Scanned directories: 0 Scanned files: 1 Infected files: 0 *Data scanned: 0.00 MB* Data read: 75.66 MB (ratio 0.00:1) Time: 2.416 sec (0 m 2 s) What is the maximum file size ClamAV supports ?? Please reply with the maximum file size limit. I couldn't found this information in google. Thanks in Advance for your help. Run clamconf and check MaxScanSize. Probably 100M. Also, from man clamscan: --max-scansize=#n Extract and scan at most #n kilobytes from each scanned file. You may pass the value in megabytes in format xM or xm, where x is a number. This option protects your system against DoS attacks (default: 100 MB, max: 4 GB) However, if the file is an archive, then the MaxFileSize is probably 25M. -Al- -- Al Varnell Mountain View, CA ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml -- Regards, *R.Siranjeevi** **| MCA @ PSG Tech* - Count the flowers of your garden, NOT the leafs which falls away! ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
Re: [clamav-users] What is the maximum file size ClamAV supports ??
On 14-09-2012 07:07, Siranjeevi wrote: Hi Todd, Thanks for explanation. Its really helpful for me to understand. Actually i have tried with clamdscan only. Clamscan command is working perfectly. I have struggled nearly 10 times and installed the ClamAV in my Cent OS 6. I have tried to install in many ways like using rpm, tar, and at last done with yum install. I am learning a lot from you guys. Thanks for replies. You people are really more dynamic than i ever expected. I am getting replies from different guys and it sounds good. Can i ask more questions over here know ?? On Fri, Sep 14, 2012 at 6:47 PM, Todd Lyons tly...@ivenue.com wrote: On Fri, Sep 14, 2012 at 5:59 AM, Siranjeevi siranjee...@gmail.com wrote: I changed the items in clamd.conf MaxScanSize = 157286400 MaxFileSize = 104857600 But Still, the changes are not reflected in clamscan. I couldn't scan large files which is of 75MB in size. Did you mean clamdscan? Or are you actually using clamscan? clamscan is a standalone program which loads its own copy of the virus database and scans everything itself. clamdscan is a small program which connects to a running clamd daemon and asks the daemon to scan the files and waits for the answer. Which one you are using will have some bearing on what is recommended to you. I suggest first that you repeat your tests with clamdscan and see what changes, if anything. ...Todd -- The total budget at all receivers for solving senders' problems is $0. If you want them to accept your mail and manage it the way you want, send it the way the spec says to. --John Levine ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml Did you restart clamd after did the changes to clamd.conf? Changes in clamd.conf won't take effect until you restart clamd daemon. Frank ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
