Hello all,


I'm running ClamAV 0.65 which I installed on a RedHat 9 box from RPM (ftp://crash.fce.vutbr.cz/pub/linux/clamav/clamav-0.65-2.i386.rpm).

I'm testing out running scans against the system using clamscan and clamdscan (the clamd client), and I have the clamd daemon running.

Here are the issues I'm seeing:

1. Running clamdscan produces a lot of "Unable to open file or directory." errors while clamscan is able to open those same files successfully (or at least reports that it does).

2. Neither clamscan nor clamdscan detect viruses in tar archives, even with the ScanArchive directive in /etc/clamav.conf. However, if I pass the --tar=/bin/tar option to both, only clamscan will successfully extract and detect the virus. I was simply following the documentation in the clamdscan man page that says "clamdscan accepts all the options implemented in clamscan." BTW, I simply created a text file, stuck the EICAR test string in there and then tar'red it up. This behaviour was noted by another user back in Feb 2003: http://www.mail-archive.com/[EMAIL PROTECTED]/msg00516.html


I'd much rather use clamdscan, so that I can send virus alerts via e-mail, as clamscan does not seem to allow for an e-mail alert option via the command line. I suppose I could log to a file and use swatch or some other log monitoring tool, but if I can get this to work natively with ClamAV, I'd prefer to do that. The larger problem is really with the scanner being thorough with its scans and digging through archives.


Thanks for any help!

_Khalid





-------------------------------------------------------
This SF.net email is sponsored by OSDN's Audience Survey.
Help shape OSDN's sites and tell us what you think. Take this
five minute survey and you could win a $250 Gift Certificate.
http://www.wrgsurveys.com/2003/osdntech03.php?site=8
_______________________________________________
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users

Reply via email to