Re: [Clamav-users] Outdated Engine warning suppress
Thanks for the input. Veselin On Wed, Oct 15, 2008 at 09:58:19AM -0400, Charles Gregory wrote: Veselin@ wrote: I'm running Debian in a production environment, I cannot afford using the volatile repository, On Wed, 15 Oct 2008, Bowie Bailey wrote: Either install it from volatile, build it from source, or find a 3rd party package that you can install. An antivirus tool is one thing that you need to keep current. If you are concerned about a new version of clamav 'failing', you may want to consider installing the volatile version separately, and keep the stable version as 'backup'. Then you could create a piece of code (in procmail, or wherever convenient) to check that the volatile ClamAV did not return an error. If it does, run the stable version, which you can store separately, but still use the same database. Naturally, until you discover the problem with the latest version, you'll take a performance hit, but this provides maximal AV protection for the system. Better than continuing to run on an out-dated engine. My 0.02 dollars. - Charles ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
[Clamav-users] Outdated Engine warning suppress
Hello, could you please advise if there is a way to run clamscan, suppressing the engine outdated warning: LibClamAV Warning: *** LibClamAV Warning: *** This version of the ClamAV engine is outdated. *** LibClamAV Warning: *** DON'T PANIC! Read http://www.clamav.net/support/faq *** LibClamAV Warning: *** I'm running Debian in a production environment, I cannot afford using the volatile repository, meaning that my engine will always be outdated. Thank you. Veselin ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
[Clamav-users] Clamscan takes 80minutes to scan a file
Hello, I'm running ClamAV 0.90.1/8187, Debian 2.6.18-4-powerpc Clamscan takes way too long to process even a single file. Scan summary shows 80 minutes for scanning one 1 small txt file. Tested with different file types/sizes, same result. Removed and reinstalled Clamav package, no difference. Any advise on what could be slowing clamscan down so much? Regards, Veselin ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
Re: [Clamav-users] Clamscan takes 80minutes to scan a file
thank you Tomasz ClamAV 0.93.3 works OK regards, veselin On Mon, Sep 08, 2008 at 03:28:45PM +0200, Tomasz Kojm wrote: On Mon, 8 Sep 2008 14:25:15 +0100 Veselin Kantsev [EMAIL PROTECTED] wrote: Any advise on what could be slowing clamscan down so much? You're using a very old version of ClamAV which has a bug making it very slow. -- oo. Tomasz Kojm [EMAIL PROTECTED] (\/)\. http://www.ClamAV.net/gpg/tkojm.gpg \..._ 0DCA5A08407D5288279DB43454822DC8985A444B //\ /\ Mon Sep 8 15:27:51 CEST 2008 ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
[Clamav-users] ClamAV scan report
Hello, A question about the scan output of ClamAV. I have a script that finds files that have been modified in the last N days from a folder and then passes the list to clamscan. I'm using cat LIST.txt | xargs -0 clamscan -ir --stdout REPORT.txt When the scan is finished the report looks like this: --- SCAN SUMMARY --- Known viruses: 396676 Engine version: 0.93.1 Scanned directories: 0 Scanned files: 684 Infected files: 0 Data scanned: 440.22 MB Time: 51.853 sec (0 m 51 s) --- SCAN SUMMARY --- Known viruses: 396676 Engine version: 0.93.1 Scanned directories: 0 Scanned files: 86 Infected files: 0 Data scanned: 41.97 MB Time: 6.677 sec (0 m 6 s) Why are there two summaries? Sometimes when I'm searching for files in multiple folders there is even more summaries generated. Thank you. Veselin ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
Re: [Clamav-users] ClamAV scan report
Thanks you Tilman. From what I understand, xargs passes the command line arguments in batches, launching clamscan once for each batch. Veselin On Tue, Aug 19, 2008 at 11:41:18AM +0200, Tilman Schmidt wrote: Veselin Kantsev schrieb: I have a script that finds files that have been modified in the last N days from a folder and then passes the list to clamscan. I'm using cat LIST.txt | xargs -0 clamscan -ir --stdout REPORT.txt When the scan is finished the report looks like this: --- SCAN SUMMARY --- Known viruses: 396676 Engine version: 0.93.1 Scanned directories: 0 Scanned files: 684 Infected files: 0 Data scanned: 440.22 MB Time: 51.853 sec (0 m 51 s) --- SCAN SUMMARY --- Known viruses: 396676 Engine version: 0.93.1 Scanned directories: 0 Scanned files: 86 Infected files: 0 Data scanned: 41.97 MB Time: 6.677 sec (0 m 6 s) Why are there two summaries? Because the xargs command in your script ran clamscan twice. Sometimes when I'm searching for files in multiple folders there is even more summaries generated. That's how xargs works. See man xargs. HTH T. -- Tilman Schmidt Phoenix Software GmbH Bonn, Germany ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
[Clamav-users] LibClamAV Warning: Bad compression in flate stream
Hello, I get this in my daily scan reports: LibClamAV Warning: Bad compression in flate stream Could you please advise what is causing this? ClamAV 0.92.1 Debian Lenny 2.6.21-2-686 -- Regards, Veselin Kantsev [EMAIL PROTECTED] Campbell-Lange Workshop ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
Re: [Clamav-users] LibClamAV Warning: Bad compression in flate stream
Thank you much Tomasz. Veselin On Tue, Jul 08, 2008 at 07:09:31PM +0200, Tomasz Kojm wrote: On Tue, 8 Jul 2008 18:01:57 +0100 Veselin Kantsev [EMAIL PROTECTED] wrote: Hello, I get this in my daily scan reports: LibClamAV Warning: Bad compression in flate stream Could you please advise what is causing this? ClamAV 0.92.1 That's from the pdf handler, upgrade to 0.93.3 and this warning will disappear. -- oo. Tomasz Kojm [EMAIL PROTECTED] (\/)\. http://www.ClamAV.net/gpg/tkojm.gpg \..._ 0DCA5A08407D5288279DB43454822DC8985A444B //\ /\ Tue Jul 8 19:08:32 CEST 2008 ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
Re: [Clamav-users] random named folders in /var/lib/clamav/
Thank you mcuh Edwin. Veselin On Wed, Jun 18, 2008 at 07:57:11PM +0300, Török Edwin wrote: Veselin Kantsev wrote: Hello, Im running ClamAV 0.92.1 on a Debian lenny 2.6.21-2-amd64 server. Im finding multiple folders with random names like clamav-83327dd0a90c83be874bc6ad067df427 located in /var/lib/clamav/. Could you please advise what are these for and if I need them, as they are using up quite some space. You don't need them, they can be safely removed. They are likely left behind during a failed update. If you get the random named folders again, try upgrading to 0.93.1, and if the problem persists please open a bugreport. Best regards, --Edwin ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
[Clamav-users] random named folders in /var/lib/clamav/
Hello, Im running ClamAV 0.92.1 on a Debian lenny 2.6.21-2-amd64 server. Im finding multiple folders with random names like clamav-83327dd0a90c83be874bc6ad067df427 located in /var/lib/clamav/. Could you please advise what are these for and if I need them, as they are using up quite some space. The folders contain the same files: COPYING, main.db, main.fp, main.hdb, main.info, main.mdb, main.ndb, main.zmd -- Regards, Veselin ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml