Re: [Clamav-devel] clamAV scanning algorithm
See: http://www.eicar.org/anti_virus_test_file.htm Specifically: "Any anti-virus product that supports the EICAR test file should detect it in any file providing that the file starts with the following 68 characters, and is exactly 68 bytes long" Best Regards, Joseph Benden .--. |o_o | |:_/ | // \ \ (| | ) /'\_ _/`\ \___)=(___/ http://www.ThrallingPenguin.com/ We design, develop, and extend software technologies for the most demanding business applications, as well as offer VoIP Consulting services. On Dec 3, 2008, at 5:41 PM, Thomasz Blaszczyk wrote: > 2) I've downloaded Eicar Test Anti-Virus File and crated 10bytes file. > (See logs below) Then I've appended Eicar to this file. Why clamscan > doesn't find a signature in this file? ___ http://lurker.clamav.net/list/clamav-devel.html Please submit your patches to our Bugzilla: http://bugs.clamav.net
[Clamav-devel] Clamd Sessions...
Hello, Inside of Clamd, once a session is established, the timeout is set to 5. May I ask why? It seems to make more sense to use the default ReadTimeout value, or make it configurable option. I'm asking because I have re-written the Proftpd module to use Clamd. Once an FTP session is established, I create a local unix socket connection to Clamd and start a session. I need to be able to keep the connection open for the time frame a user is connected, because of privileges being dropped once the user is logged in. With the timeout of 5, it pretty much closes the connection, if the user isn't quickly uploading files. Regards, Joseph Benden Thralling Penguin LLC ___ http://lurker.clamav.net/list/clamav-devel.html