Re: [clamav-users] Streaming support in ClamD

2015-07-21 Thread Paul Kosinski
, 21 Jul 2015 12:00:01 -0400 clamav-users-requ...@lists.clamav.net wrote: -- Message: 2 Date: Thu, 2 Jul 2015 12:55:54 +0300 From: Henrik K h...@hege.li To: clamav-users@lists.clamav.net Subject: Re: [clamav-users] Streaming support in ClamD Message-ID

Re: [clamav-users] Streaming support in ClamD

2015-07-08 Thread Jason Haar
On 08/07/15 17:33, Rafael Ferreira wrote: Well, the progress you see is likely to be transfer, not processing, time since that’s where most time is going to be spent for a sizable file anyways (under normal circumstances) so I doubt clamd is your main latency source here. ? I said clam was

Re: [clamav-users] Streaming support in ClamD

2015-07-07 Thread Jason Haar
Great timing for me on this topic. We are currently phasing out our use of Henrik's great havp proxy and are going to ICAP - and I have been majorly disappointed with the performance of the commercial ICAP services I've tried I had a 60M zip file I was testing with via Firefox: Kaspersky would

Re: [clamav-users] Streaming support in ClamD

2015-07-07 Thread Rafael Ferreira
Well, the progress you see is likely to be transfer, not processing, time since that’s where most time is going to be spent for a sizable file anyways (under normal circumstances) so I doubt clamd is your main latency source here. Can you elaborate on your setup a bit? Is the ICAP proxy

Re: [clamav-users] Streaming support in ClamD

2015-07-02 Thread P K
Hi guys, Waiting for your reply. It should be simpler answer. Does ClamAv support virus checking in stream mode for large files? If i have file size of 10Mb do i have to send all data to clamAv and clamAv will send status ok or it can scan data in each packet and return status for each segment?

Re: [clamav-users] Streaming support in ClamD

2015-07-02 Thread Henrik K
Let's say you have a zip file. How do you expect ClamAV to scan it packet by packet? Or any other data really. I think there are very few wild signatures in database that are allowed to match any position anywhere in a file. Only reliable way is to scan a complete file, so it knows the length