1 - I expected to be able to do multiple commands per TCP session... for example:
-- connection established
C: PING
S: PONG
C: STREAM
S: PORT nnnn
...
S: stream: OK
C: STREAM
S: PORT xxxx
...
S: stream:OK
C: QUIT
S: BYE
-- connection terminated
But I know now that this is not possible - each separate command terminates the connection after the server response comes back, and the "QUIT" command shuts down the daemon, not terminate the current session. It would be useful if the clamd man page mentioned something about this.
2 - The "QUIT" command is, in my opinion, badly documented in the clamd man page:
QUIT Perform a clean exit.
Maybe it should say:
QUIT Perform a clean shutdown of the daemon.
"clean exit" implied to me that in a session like I described above, this would cleanly notify the server that the connection was to be terminated - a "clean exit" of the communication.
3 - The "PING" command doesn't seem to be very useful in the light of each command running in its own TCP session. If I get a PONG back, I know that the server is sane. But then I have to make another TCP connection to do any other work... how do I know it's still sane? I am now not using "PING" and just assuming that if a connection opens the server is okay.
Does anyone else here think those things should be changed? I think that especially my first complaint above should be fixed - it would save a lot of overhead if one wants to scan multiple files using the "STREAM" method (instead of having to setup and teardown a separate TCP connection for each one).
Now that I'm passed these hurdles, I'll finish my python version of clamdscan which sends data to a remote clamd server via "STREAM" instead of using CONTSCAN or RAWSCAN (whichever the current clamdscan does). If anyone is interested in this, let me know and I can send it to you or post it here.
-- Jim Ramsay
------------------------------------------------------- The SF.Net email is sponsored by EclipseCon 2004 Premiere Conference on Open Tools Development and Integration See the breadth of Eclipse activity. February 3-5 in Anaheim, CA. http://www.eclipsecon.org/osdn _______________________________________________ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
