Dear Sirs , I've seen quite strange behavior of new clamd:
I try to send a message with virus: If old clamd 0.6 used: >clamd.log > Tue Oct 19 07:25:47 2004 -> +++ Started at Tue Oct 19 07:25:47 2004 > Tue Oct 19 07:25:47 2004 -> Log file size limited to 1048576 bytes. > Tue Oct 19 07:25:47 2004 -> Setting /tmp as global temporary directory > Tue Oct 19 07:25:47 2004 -> Reading databases from /bases/clamav > Tue Oct 19 07:25:47 2004 -> Protecting against 25254 viruses. > Tue Oct 19 07:25:47 2004 -> Unix socket file /run/clamd.sock > Tue Oct 19 07:25:47 2004 -> Setting connection queue length to 30 > Tue Oct 19 07:25:47 2004 -> Archive: Archived file size limit set to 10485760 bytes. > Tue Oct 19 07:25:47 2004 -> Archive: Recursion level limit set to 5. > Tue Oct 19 07:25:47 2004 -> Archive: Files limit set to 1000. > Tue Oct 19 07:25:47 2004 -> Archive: Compression ratio limit set to 200. > Tue Oct 19 07:25:47 2004 -> Archive support enabled. > Tue Oct 19 07:25:47 2004 -> RAR support enabled. > Tue Oct 19 07:25:47 2004 -> Mail files support enabled. > Tue Oct 19 07:25:47 2004 -> OLE2 support enabled. > Tue Oct 19 07:25:47 2004 -> Self checking every 3600 seconds. > Tue Oct 19 07:26:34 2004 -> /tst//16986.tmp: Worm.SCO.A FOUND If clamd 0.8 used: >clamd.log > clamd daemon 0.80 (OS: linux-gnu, ARCH: i386, CPU: i686) > Log file size limited to 2097152 bytes. > Reading databases from /bases/clamav > Protecting against 25254 viruses. > Unix socket file /run/clamd.sock > Setting connection queue length to 15 > Archive: Archived file size limit set to 10485760 bytes. > Archive: Recursion level limit set to 5. > Archive: Files limit set to 1000. > Archive: Compression ratio limit set to 250. > Archive support enabled. > Archive: RAR support disabled. > Portable Executable support enabled. > Mail files support enabled. > OLE2 support enabled. > HTML support enabled. > Self checking every 1800 seconds. > /tst//16697.tmp: OK 8-\ The message is identical for both cases. I check clamd 0.6 with clamdscan > athlon:/clamdscan --config-file=/etc/clamd.conf /tst/message.zip > /tst/message.zip: Worm.SCO.A FOUND > > ----------- SCAN SUMMARY ----------- > Infected files: 1 > Time: 0.002 sec (0 m 0 s) It's work correct..... The same file with 0.8 > athlon:/clamdscan --config-file=/etc/clamd.conf /tst/message.zip > /tst/message.zip: OK > > ----------- SCAN SUMMARY ----------- > Infected files: 0 > Time: 0.001 sec (0 m 0 s) That is the possible reason? -- Best regards, Serge Leschinsky mailto:[EMAIL PROTECTED] _______________________________________________ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
