On Tue, 22 Feb 2005 09:36:44 +0100 "Christian Hilgers" <[EMAIL PROTECTED]> wrote:
> Hi, > > I'm working on an http anti virus scanner. The main goal are > continuous and non-blocking downloads. > Therefore I need libclamav to start scanning even with a small amount > of received data. > I figured out that changing SCANBUFF will work for me. Is there a > disadvantage decreasing this buffer to 25000? I guess it is only a > performance and not a safety issue. Please do not use cl_scanbuff at all, it's to be removed in 0.90. This function only supports old type signature scanning and will miss many viruses (just try to scan test/clam.exe). You should definitely use cl_scanfile/cl_scandesc instead. Due to performance reasons you can suggest your users to use a memory based filesystem for proxy file operations (then also add some option to havp that will allow to set that directory in libclamav with cl_settempdir()) > PS: Is it possible to put my proxy in your "Third party software" > section in your documentation? > My proxy is called havp http://www.server-side.de/ Yes, of course! -- oo ..... Tomasz Kojm <[EMAIL PROTECTED]> (\/)\......... http://www.ClamAV.net/gpg/tkojm.gpg \..........._ 0DCA5A08407D5288279DB43454822DC8985A444B //\ /\ Tue Feb 22 12:04:35 CET 2005
pgpdLCwDRlvFi.pgp
Description: PGP signature
_______________________________________________ http://lurker.clamav.net/list/clamav-devel.html
