Re: [clamav-users] clamav-users@lists.clamav.net

2016-11-18 Thread Steve basford
Great... thanks for confirming the hunch. Cheers, Steve Twitter: @sanesecurity On 18 November 2016 22:26:13 Richard Doyle wrote: Ah yes, that seems to have caused the hangup. The clamscan debug run went from 257 seconds to 25 seconds On 11/18/2016 02:07

Re: [clamav-users] clamav-users@lists.clamav.net

2016-11-18 Thread Richard Doyle
Ah yes, that seems to have caused the hangup. The clamscan debug run went from 257 seconds to 25 seconds On 11/18/2016 02:07 PM, Steve basford wrote: > Remove javascript.ndb and retry... > > Cheers, > > Steve > Twitter: @sanesecurity > > > > On 18 November 2016 22:02:41 Richard Doyle >

Re: [clamav-users] clamav-users@lists.clamav.net

2016-11-18 Thread Steve basford
Remove javascript.ndb and retry... Cheers, Steve Twitter: @sanesecurity On 18 November 2016 22:02:41 Richard Doyle wrote: On 11/18/2016 01:52 PM, Steve basford wrote: Does clamscan --debug on the database folder show the same delays... Yes Can you do

Re: [clamav-users] clamav-users@lists.clamav.net

2016-11-18 Thread Richard Doyle
On 11/18/2016 01:52 PM, Steve basford wrote: > Does clamscan --debug on the database folder show the same delays... Yes > > Can you do a ls on the database folder Sure: root@panic:/var/lib/clamav# ls badmacro.ndb junk.ndb porcupine.ndb spear.ndb

Re: [clamav-users] clamav-users@lists.clamav.net

2016-11-18 Thread Steve basford
Does clamscan --debug on the database folder show the same delays... Can you do a ls on the database folder Cheers, Steve Twitter: @sanesecurity On 18 November 2016 21:39:09 Richard Doyle wrote: Last time I tried it with an empty list, and it still took 5

Re: [clamav-users] 5 minutes to start

2016-11-18 Thread Richard Doyle
On 11/18/2016 01:32 PM, Anssi Johansson wrote: > 18.11.2016, 23.10, Richard Doyle kirjoitti: >> Yes, clamd on my system is taking about 5 minutes to start, which causes >> timeouts. This issue developed just this week. >> >> I found that setting >> >> OfficialDatabaseOnly true >> >> helped

Re: [clamav-users] clamav-users@lists.clamav.net

2016-11-18 Thread Richard Doyle
Last time I tried it with an empty list, and it still took 5 minutes for clamd to start. On 11/18/2016 01:25 PM, Steve basford wrote: > Can you give me a list of 3rd party databases you are using > > Cheers, > > Steve > Twitter: @sanesecurity > > > > On 18 November 2016 21:11:22 Richard

Re: [clamav-users] 5 minutes to start

2016-11-18 Thread Anssi Johansson
18.11.2016, 23.10, Richard Doyle kirjoitti: Yes, clamd on my system is taking about 5 minutes to start, which causes timeouts. This issue developed just this week. I found that setting OfficialDatabaseOnly true helped considerebly--clamd loads in a few seconds. I'd really like to get back to

Re: [clamav-users] clamav-users@lists.clamav.net

2016-11-18 Thread Steve basford
Can you give me a list of 3rd party databases you are using Cheers, Steve Twitter: @sanesecurity On 18 November 2016 21:11:22 Richard Doyle wrote: Yes, clamd on my system is taking about 5 minutes to start, which causes timeouts. This issue developed

Re: [clamav-users] clamav-users@lists.clamav.net

2016-11-18 Thread Richard Doyle
Yes, clamd on my system is taking about 5 minutes to start, which causes timeouts. This issue developed just this week. I found that setting OfficialDatabaseOnly true helped considerebly--clamd loads in a few seconds. I'd really like to get back to using unofficial databases, but not right now.

[clamav-users] Trying to set OnAccessExcludeUID to zero, not disabled

2016-11-18 Thread Mark Borley
Hello, I'm trying to set OnAccessExcludeUID 0 in clamd.conf so scans are not run for the root user but when I view the configuration using clamconf it shows OnAccessExcludeUID disabled so the 0 is obviously being interpreted as FALSE rather than the intended root UID of zero. How do I

[clamav-users] clamav-users@lists.clamav.net

2016-11-18 Thread Mike Grau
Hello all, Since yesterday, 10:26:52 CST, I've gotten 30 if these in the mail log: "Timeout reading from clamd daemon at /var/spool/MIMEDefang/clamd.sock" Before that I can't remember when I've seen this message - perhaps years. This is on a low volume server with < 3500 total connection

Re: [clamav-users] clamscan (NOT clamdscan) log file setup in *.conf file?

2016-11-18 Thread G.W. Haywood
Hi there, On Fri, 18 Nov 2016, Noel Jones wrote: Perhaps it would be useful for clamscan to read (some?) options from a config file, or even better from environment variables. Feel free to open a bug report/feature request and make your case. This would be what I'd call 'feature creep'. Any

Re: [clamav-users] clamscan (NOT clamdscan) log file setup in *.conf file?

2016-11-18 Thread Noel Jones
On 11/18/2016 8:39 AM, Fouts, Christopher wrote: > Thanks. Yes I understand that clamscan is independent from clamdscan > (hence, clamd), but I was hoping for a more consistent behavior between > the two applications. I clamdscan can read the log path from some *.conf > file, why can¹t clamscan do

Re: [clamav-users] clamscan (NOT clamdscan) log file setup in *.conf file?

2016-11-18 Thread Fouts, Christopher
Thanks. Yes I understand that clamscan is independent from clamdscan (hence, clamd), but I was hoping for a more consistent behavior between the two applications. I clamdscan can read the log path from some *.conf file, why can¹t clamscan do the same? I have no issue using the -l option. Chris