On 2009-03-01 14:57, Tom Shaw wrote:
> At 6:16 PM -0800 2/28/09, Bill Landry wrote:
>   
>> Tom Shaw wrote:
>>     
>>>  Some issues:
>>>
>>>  socat ran fine on 0.94.2 but on 0.95.rc1
>>>
>>>  echo PING|socat - /var/tmp/clamd.socket
>>>
>>>  is silent yet I can type
>>>       
>> Tom, are you sure that is the correct path to your clamd.socket?  Just
>> curious, because socat if working and responding with PONG fine for me
>> when I PING my clamd.socket with 0.95.rc1:
>>
>> clamscan -V
>> ClamAV 0.95rc1/9047/Wed Feb 25 02:59:41 2009
>>
>> echo PING | socat - /var/amavis/clamd.sock
>> PONG
>>     
>
> Yes, that is correct port in conig, and same port that was working 
> fine in your "unofficial script" and same port used with 
> File::Scan::ClamAV and, like I said socat works if I type PING in 
> from the terminal.
>
> All the above worked fine on 0.94.2 as is a carbon copy of the 
> operational system. With 0.95, File::Scan::ClamAV works fine:
>
> Sun Mar  1 07:38:38 2009 -> stream(127.0....@1812): 
> Sanesecurity.Dipl.8334.UNOFFICIAL FOUND
>
> as does clamdscan:
>
> $ clamdscan ~/
> /Users/tshaw/Library/Mail/Mac-trshaw/Drafts.imapmbox/Messages/1434.emlx: 
> Eicar-Test-Signature FOUND
>
> I am totally confused,
>   

What does this output:
$ echo PING | strace socat - /var/tmp/clamd.socket
$ echo -ne "nPING\n" | strace socat - /var/tmp/clamd.socket

Best regards,
--Edwin
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Reply via email to