Re: [Clamav-users] Freshclam doesn't update automatically!

2006-09-08 Thread Hok Hie Tjioe
Hi Odhiambo, That is the problem.. NOTHING at all... Before 16 august I saw a couple error message that it can't connect to the server. But after that the connection was restored and the signature is updated. After 16 August nothing is logged in the file. Seem that tha daemon stops with periodic

Re: [Clamav-users] clamav scan crashes server

2006-09-08 Thread Dennis Peterson
Casper Gasper wrote: Thanks to everyone for the help. Just to follow up, the problem was actually a hardware fault. The hard drive is flaky, but the box is so lightly loaded the weekly clamscan was the only thing that thrashed the disk. Testing with: dd if=/dev/hda of=/dev/null crashes the

[Clamav-users] Can I give clam a list of files to scan

2006-09-08 Thread mcd
Basically I want to continue on with what some of the people on this list were saying about using tripwire (or something similar) to just scan files on a system that have changed. I wouldn't want to call clamscan multiple times each with one file, but rather call it once with a big list of files

RE: [Clamav-users] Can I give clam a list of files to scan

2006-09-08 Thread Bowie Bailey
mcd wrote: Basically I want to continue on with what some of the people on this list were saying about using tripwire (or something similar) to just scan files on a system that have changed. I wouldn't want to call clamscan multiple times each with one file, but rather call it once with a big

RE: [Clamav-users] Can I give clam a list of files to scan

2006-09-08 Thread Barry Gill
find (options) | xargs clamscan So to search all files in home find /home/ |xargs clamscan Or to scan only certain files of specified size (thanks to Noel Jones for this one) find / -type f -size N | xargs clamscan -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]

Re: [Clamav-users] Can I give clam a list of files to scan

2006-09-08 Thread kwijibo
mcd wrote: Basically I want to continue on with what some of the people on this list were saying about using tripwire (or something similar) to just scan files on a system that have changed. I wouldn't want to call clamscan multiple times each with one file, but rather call it once with a big

RE: [Clamav-users] Can I give clam a list of files to scan

2006-09-08 Thread Barry Gill
Or if you maintain a file with the filenames and paths that you want to scan, you can use cat to output each line of that file to clamscan in the same fashion. cat filename | xargs clamscan ___ http://lurker.clamav.net/list/clamav-users.html

Re: [Clamav-users] Can I give clam a list of files to scan

2006-09-08 Thread Dennis Peterson
mcd wrote: Basically I want to continue on with what some of the people on this list were saying about using tripwire (or something similar) to just scan files on a system that have changed. I wouldn't want to call clamscan multiple times each with one file, but rather call it once with a big

Re: [Clamav-users] Can I give clam a list of files to scan

2006-09-08 Thread jphillip
On Fri, 8 Sep 2006, mcd wrote: Basically I want to continue on with what some of the people on this list were saying about using tripwire (or something similar) to just scan files on a system that have changed. I wouldn't want to call clamscan multiple times each with one file, but rather

Re: [Clamav-users] Can I give clam a list of files to scan

2006-09-08 Thread mcd
This is an interesting approach, but let me explain a little more. I will be running md5sums for every file on a system. I will then compare that list of md5sums against a list of md5sums that are know to be virus free. The files that do not have valid md5sums in the database will then need to be

Re: [Clamav-users] Can I give clam a list of files to scan

2006-09-08 Thread Dennis Peterson
mcd wrote: This is an interesting approach, but let me explain a little more. I will be running md5sums for every file on a system. I will then compare that list of md5sums against a list of md5sums that are know to be virus free. The files that do not have valid md5sums in the database will

RE: [Clamav-users] Can I give clam a list of files to scan

2006-09-08 Thread Bowie Bailey
mcd wrote: On 9/8/06, Barry Gill [EMAIL PROTECTED] wrote: cat filename | xargs clamscan This is an interesting approach, but let me explain a little more. I will be running md5sums for every file on a system. I will then compare that list of md5sums against a list of md5sums that are

Re: [Clamav-users] Can I give clam a list of files to scan

2006-09-08 Thread Daniel T. Staal
On Fri, September 8, 2006 10:42 am, mcd said: This is an interesting approach, but let me explain a little more. I will be running md5sums for every file on a system. I will then compare that list of md5sums against a list of md5sums that are know to be virus free. The files that do not have

Re: [Clamav-users] Can I give clam a list of files to scan

2006-09-08 Thread Noel Jones
At 09:42 AM 9/8/2006, mcd wrote: This is an interesting approach, but let me explain a little more. I will be running md5sums for every file on a system. I will then compare that list of md5sums against a list of md5sums that are know to be virus free. The files that do not have valid md5sums

Re: [Clamav-users] Can I give clam a list of files to scan

2006-09-08 Thread Dennis Peterson
Noel Jones wrote: At 09:42 AM 9/8/2006, mcd wrote: This is an interesting approach, but let me explain a little more. I will be running md5sums for every file on a system. I will then compare that list of md5sums against a list of md5sums that are know to be virus free. The files that do not

Re: [Clamav-users] Can I give clam a list of files to scan

2006-09-08 Thread Noel Jones
At 10:11 AM 9/8/2006, Dennis Peterson wrote: Noel Jones wrote: cat big.list.of.files | xargs clamscan xargs is still limited by max line length, so this needs to be done with care. Perl can also be used in place of clamdscan to feed file names to clamd (which must be run as root). The

RE: [Clamav-users] Can I give clam a list of files to scan

2006-09-08 Thread Barry Gill
xargs is still limited by max line length, so this needs to be done with care. Perl can also be used in place of clamdscan to feed file names to clamd (which must be run as root). The advantage of Perl is it can iterate over an array and of course manage all the logging. Also, depending on how

Re: [Clamav-users] clamav scan crashes server

2006-09-08 Thread Casper Gasper
On 08/09/06, Dennis Peterson [EMAIL PROTECTED] wrote: Casper Gasper wrote: Thanks to everyone for the help. Just to follow up, the problem was actually a hardware fault. The hard drive is flaky, but the box is so lightly loaded the weekly clamscan was the only thing that thrashed the disk.

Re: [Clamav-users] Can I give clam a list of files to scan

2006-09-08 Thread Dennis Peterson
At 10:11 AM 9/8/2006, Dennis Peterson wrote: Noel Jones wrote: cat big.list.of.files | xargs clamscan xargs is still limited by max line length, so this needs to be done with care. Perl can also be used in place of clamdscan to feed file names to clamd (which must be run as root).

Re: [Clamav-users] Can I give clam a list of files to scan

2006-09-08 Thread Henrik Krohns
On Fri, Sep 08, 2006 at 10:05:48AM -0700, Dennis Peterson wrote: Hopefully the list is also properly escaped and or quoted. xargs is pretty unhappy with filenames that have special characters in them, or spaces. This is true no matter how the list is submitted to the scanner. This is the

Re: [Clamav-users] Can I give clam a list of files to scan

2006-09-08 Thread Dennis Peterson
On Fri, Sep 08, 2006 at 10:05:48AM -0700, Dennis Peterson wrote: Hopefully the list is also properly escaped and or quoted. xargs is pretty unhappy with filenames that have special characters in them, or spaces. This is true no matter how the list is submitted to the scanner. This is

Re: [Clamav-users] Can I give clam a list of files to scan

2006-09-08 Thread Philip Ershler
On Sep 8, 2006, at 11:34 AM, Dennis Peterson wrote: On Fri, Sep 08, 2006 at 10:05:48AM -0700, Dennis Peterson wrote: Hopefully the list is also properly escaped and or quoted. xargs is pretty unhappy with filenames that have special characters in them, or spaces. This is true no matter

Re: [Clamav-users] Can I give clam a list of files to scan

2006-09-08 Thread mcd
On 9/8/06, Philip Ershler [EMAIL PROTECTED] wrote: On Sep 8, 2006, at 11:34 AM, Dennis Peterson wrote: On Fri, Sep 08, 2006 at 10:05:48AM -0700, Dennis Peterson wrote: Hopefully the list is also properly escaped and or quoted. xargs is pretty unhappy with filenames that have special

Re: [Clamav-users] Can I give clam a list of files to scan

2006-09-08 Thread Chuck Swiger
On Sep 8, 2006, at 10:34 AM, Dennis Peterson wrote: Henrik Krohns [EMAIL PROTECTED] wrote: Thats why we have: find -print0 | xargs -0 Assumes Linux? No. This -print0 option first appeared in GNU find before Linux existed, as far as I can tell. It was adopted into BSD versions of find

Re: [Clamav-users] Can I give clam a list of files to scan

2006-09-08 Thread Chuck Swiger
On Sep 8, 2006, at 11:25 AM, mcd wrote: Sorry this is on a windows system. Can I just cat the file list and pipe it to the windows version of clamscan? I believe it takes stdin? The problem is that clamscan wants the files or directories passed to it via the command line, not via

Re: [Clamav-users] Can I give clam a list of files to scan

2006-09-08 Thread Bill Landry
- Original Message - From: Chuck Swiger [EMAIL PROTECTED] On Sep 8, 2006, at 11:25 AM, mcd wrote: Sorry this is on a windows system. Can I just cat the file list and pipe it to the windows version of clamscan? I believe it takes stdin? The problem is that clamscan wants the

Re: [Clamav-users] clamav-milter will not create socket file

2006-09-08 Thread clamav-list
On Thu, 7 Sep 2006, Scott Moseman wrote: Date: Thu, 7 Sep 2006 22:31:43 -0500 From: Scott Moseman [EMAIL PROTECTED] Reply-To: ClamAV users ML clamav-users@lists.clamav.net To: clamav-users@lists.clamav.net Subject: [Clamav-users] clamav-milter will not create socket file I have searched

Re: [Clamav-users] Can I give clam a list of files to scan

2006-09-08 Thread Dennis Peterson
On Sep 8, 2006, at 10:34 AM, Dennis Peterson wrote: Henrik Krohns [EMAIL PROTECTED] wrote: Thats why we have: find -print0 | xargs -0 Assumes Linux? No. This -print0 option first appeared in GNU find before Linux existed, as far as I can tell. It was adopted into BSD versions of

Re: [Clamav-users] Can I give clam a list of files to scan

2006-09-08 Thread Christopher X. Candreva
On Fri, 8 Sep 2006, Dennis Peterson wrote: Seems not to work in Solaris. As a Solaris fan -- you REALLY want to install gnu find, and grep, and fileutils. At least. Sun still for whatever reason doesn't support many newer options, newer being post 1989.

Re: [Clamav-users] Can I give clam a list of files to scan

2006-09-08 Thread Dennis Peterson
On Fri, 8 Sep 2006, Dennis Peterson wrote: Seems not to work in Solaris. As a Solaris fan -- you REALLY want to install gnu find, and grep, and fileutils. At least. Sun still for whatever reason doesn't support many newer options, newer being post 1989. You can't imagine the

Re: [Clamav-users] Can I give clam a list of files to scan

2006-09-08 Thread Chuck Swiger
On Sep 8, 2006, at 12:19 PM, Dennis Peterson wrote: No. This -print0 option first appeared in GNU find before Linux existed, as far as I can tell. It was adopted into BSD versions of find around 1993 to 1995: Seems not to work in Solaris. Agreed-- Solaris and AIX are the two platforms I

Re: [Clamav-users] Can I give clam a list of files to scan

2006-09-08 Thread tBB
The problem is that clamscan wants the files or directories passed to it via the command line, not via stdin-- besides which, Windows has a fairly limited max length for the command line. Actually it's not that limited (but still too limited for this purpose I guess). Windows XP/2k3 has a

Re: ?^???G Re: [Clamav-users] clamav 0.88.4 freshclamd question

2006-09-08 Thread George R . Kasica
the following installed and running well gmp-4.1.4.tar.gz Does that mean I can come out from under my rock now? LOL...Dennis, let me apologize, I should have not hit the SEND key so quickly here. Its just lately I see so much of the can't/don't bother me type responses in so many of the lists