On 3/24/07, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote:
Hello, everyone. I am new to this and to clam AV. I am looking at
building a solution around it (email scanning) and have a performance
question:
My question is, does clam av scan the entire file or is required to scan
the entire file before determining if it's a virus or not?
It needs to scan the entire file, because the virus can be anywhere in the file.
However it does stop the scan as soon as it finds a virus.
Or does it scan
as much of the file (i.e., the first 64K) before it determines
What if your file is larger than 64k, and the virus is at the end, or
in the middle?
Don't you want it detected?
it's a file?
You already know its a file ;)
I assume if you scan zip and jar files, it has to unpack the zip
and scan each file inside. I'm wondering if a stream approach would be
better in terms of performance or should I dettach each file attachment in
an email message and scan the file that way.
Clamav can extract the attachments itself.
If clamd is running on same server, that you have the file on, (and it
has permission to access it), there is no need/benefit for streaming
the file to it.
Or possibly could I have a
service (clamd) on another computer and stream the files that way.
You can.
Luca Gibelli <[EMAIL PROTECTED]>
Sent by: [EMAIL PROTECTED]
03/23/2007 07:01 PM
Please respond to
ClamAV Development <clamav-devel@lists.clamav.net>
To
ClamAV Development <clamav-devel@lists.clamav.net>
cc
Subject
Re: [Clamav-devel] Patch: freshclam: keep downloaded cdiffs for local
distribution
[...]
Please don't quote a message you are not replying to. And don't start
new threads by using 'Reply'.
Best regards,
Edwin
_______________________________________________
http://lurker.clamav.net/list/clamav-devel.html
Please submit your patches to our Bugzilla: http://bugs.clamav.net
