[clamav-users] error: 'os_generic' undeclared

2016-12-21 Thread crazy thinker
Hi all, i tried to build clamav source code with ndk tools for android platform and x86 cpu architecture please find below my build script info *#!/bin/bash* *export NDK=/home/crazythinker-admin/Android/Sdk/ndk-bundle* *$NDK/build/tools/make-standalone-toolchain.sh --platform=android-9 --to

Re: [clamav-users] Cannot skip OLE2 checking

2016-12-21 Thread Kees Theunissen
On Wed, 21 Dec 2016, Mark Foley wrote: >On Wed, 21 Dec 2016 17:34:05 Reindl Harald wrote: >> >> Am 21.12.2016 um 17:25 schrieb Mark Foley: >> > I'm running clamdscan on Maildir folders as: >> > >> > clamdscan --config-file=/usr/local/etc/clamdscan.conf --multiscan \ >> > --fdpass --allmatch --st

Re: [clamav-users] Cannot skip OLE2 checking

2016-12-21 Thread Mark Foley
On Wed, 21 Dec 2016 17:34:05 Reindl Harald wrote: > > Am 21.12.2016 um 17:25 schrieb Mark Foley: > > I'm running clamdscan on Maildir folders as: > > > > clamdscan --config-file=/usr/local/etc/clamdscan.conf --multiscan \ > > --fdpass --allmatch --stdout /home/HPRS/user/Maildir/ > > > > I want to

Re: [clamav-users] signature memory use

2016-12-21 Thread Arnaud Jacques / SecuriteInfo.com
Steve, > Time: 86.344 sec (1 m 26 s) That's why we should use clamdscan instead of clamscan. Clamscan reload all databases each time, this takes too much time. Btw, what was the CPU for this test ? -- Best regards, Arnaud Jacques SecuriteInfo.com Facebook : https://www.facebook.com/pages/Se

Re: [clamav-users] Cannot skip OLE2 checking

2016-12-21 Thread Reindl Harald
Am 21.12.2016 um 17:25 schrieb Mark Foley: I'm running clamdscan on Maildir folders as: clamdscan --config-file=/usr/local/etc/clamdscan.conf --multiscan \ --fdpass --allmatch --stdout /home/HPRS/user/Maildir/ I want to skip checking for OLE2 macros. The /usr/local/etc/clamdscan.conf has:

[clamav-users] Cannot skip OLE2 checking

2016-12-21 Thread Mark Foley
I'm running clamdscan on Maildir folders as: clamdscan --config-file=/usr/local/etc/clamdscan.conf --multiscan \ --fdpass --allmatch --stdout /home/HPRS/user/Maildir/ I want to skip checking for OLE2 macros. The /usr/local/etc/clamdscan.conf has: ScanOLE2 no OLE2BlockMacros no However, it sti

Re: [clamav-users] signature memory use

2016-12-21 Thread Steve Basford
> So all signatures should be running fine with 6Gb of RAM, right ? > Even our big signatures :) Summary test: Using clamscan only to scan test.eml (3,706 bytes) ClamAV Official sigs only (daily/main): pool memory used: 385.675 MB Official + *all* Sanesecurity/Distributed sigs pool memory used

Re: [clamav-users] signature memory use

2016-12-21 Thread Arnaud Jacques / SecuriteInfo.com
Thank you for your report Steve. > Official: Missing main.cvd :/ > Hope that helps see where some of the memory may be going, > sorry for not sorting... I'm under orders to go shopping ;) So all signatures should be running fine with 6Gb of RAM, right ? Even our big signatures :) -- Best rega

Re: [clamav-users] with main.cvd clamscan dead slow

2016-12-21 Thread Arnaud Jacques / SecuriteInfo.com
Selçuk, > in redhat El 6 version thereis no clamdscan command . It is in the "clamd" package. http://rpm.pbone.net/index.php3/stat/4/idpl/34508318/dir/redhat_el_6/com/clamd-0.99.2-1.el6.x86_64.rpm.html -- Best regards, Arnaud Jacques SecuriteInfo.com Facebook : https://www.facebook.com/pages

Re: [clamav-users] with main.cvd clamscan dead slow

2016-12-21 Thread Reindl Harald
Am 21.12.2016 um 14:38 schrieb Selcuk Yazar: Dear Arnaud in redhat El 6 version thereis no clamdscan command this is simply not true - clamav is from the EPEL repo and here you go https://koji.fedoraproject.org/koji/buildinfo?buildID=772565 the package "clamd" contains /usr/bin/clamdscan u

[clamav-users] signature memory use

2016-12-21 Thread Steve Basford
As some people have reported memory issues... Quickly put these together based on scanning a small file and *only* loading *one* signature database at a time: Sanesecurity: badmacro.ndb,pool memory used: 5.132 MB blurl.ndb,pool memory used: 4.800 MB bofhland_cracked_URL.ndb,pool memory used: 4.3

Re: [clamav-users] with main.cvd clamscan dead slow

2016-12-21 Thread Selcuk Yazar
Dear Arnaud in redhat El 6 version thereis no clamdscan command . when a new mail arrived at postfix server, it calls amavisd and spamassasin then clamscan running for emails. can it (slow scan) be depend to internet connection ?? normally we are managing 60K users with clam with no problem but

Re: [clamav-users] with main.cvd clamscan dead slow

2016-12-21 Thread Arnaud Jacques / SecuriteInfo.com
Hello Selçuk, > when i try to run clamscan for single file on tmp folder it takes 12 > minutes !!! Please use clamdscan. How many time it takes to scan the same file ? -- Best regards, Arnaud Jacques SecuriteInfo.com Facebook : https://www.facebook.com/pages/SecuriteInfocom/132872523492286 Tw

[clamav-users] with main.cvd clamscan dead slow

2016-12-21 Thread Selcuk Yazar
Hi, we have redhat EL 6 server (92GB RAM , 8Core CPU )with postfix and we use clamav for viruses etc. when i try to run clamscan for single file on tmp folder it takes 12 minutes !!! after i move main.cvd (105MB) trash it takes 4 seconds. what it can be ? thanks in advance Selçuk YAZAR __

Re: [clamav-users] clamd restart

2016-12-21 Thread Arnaud Jacques / SecuriteInfo.com
Hello, > Javascript.ndb from Securiteinfo was causing major memory and scanning > issues for some people. Free version of javascript.ndb has 39861 lines Pro version of javascript.ndb has 45511 lines. This should be OK for 6Gb of RAM. Even 4Gb I think. AFAIK, the problem occurs when javascript.n

Re: [clamav-users] clamd restart

2016-12-21 Thread Steve basford
On 21 December 2016 11:07:42 Al Varnell wrote: Are you using any UNOFFICIAL signatures? Some of them have been causing memory issues recently for others. Al, while some 3rd party sigs are using memory, you also got to remember the Huge amount of sig only hashes the official sigs are addi

Re: [clamav-users] clamd restart

2016-12-21 Thread Steve basford
Do you have a list of signatures in your clamav database folder you can list? Cheers, Steve Twitter: @sanesecurity On 21 December 2016 11:20:12 "Richard Walker - Seven Internet Ltd" wrote: Hi Al Yes I'm using unofficial signatures. I have disabled the cron for updates. How do I safety r

Re: [clamav-users] clamd restart

2016-12-21 Thread Richard Walker - Seven Internet Ltd
Hi Al Yes I'm using unofficial signatures. I have disabled the cron for updates. How do I safety remove the UNOFFICIAL signatures? Thanks Rich -Original Message- From: clamav-users [mailto:clamav-users-boun...@lists.clamav.net] On Behalf Of Al Varnell Sent: 21 December 2016 11:07 To: Cl

Re: [clamav-users] clamd restart

2016-12-21 Thread Al Varnell
Are you using any UNOFFICIAL signatures? Some of them have been causing memory issues recently for others. -Al- On Wed, Dec 21, 2016 at 02:09 AM, Richard Walker - Seven Internet Ltd wrote: > > Hi > > I am having to restart clamd twice a day now. I can't find anything in the > mail/clamd logs o

[clamav-users] clamd restart

2016-12-21 Thread Richard Walker - Seven Internet Ltd
Hi I am having to restart clamd twice a day now. I can't find anything in the mail/clamd logs other than hundreds of entries like this 1cIzSP-8u-84 malware acl condition: clamd /var/run/clamav/clamd.sock : unable to connect to UNIX socket (/var/run/clamav/clamd.sock): Connection refused On s