On 2009-03-01 14:57, Tom Shaw wrote: > At 6:16 PM -0800 2/28/09, Bill Landry wrote: > >> Tom Shaw wrote: >> >>> Some issues: >>> >>> socat ran fine on 0.94.2 but on 0.95.rc1 >>> >>> echo PING|socat - /var/tmp/clamd.socket >>> >>> is silent yet I can type >>> >> Tom, are you sure that is the correct path to your clamd.socket? Just >> curious, because socat if working and responding with PONG fine for me >> when I PING my clamd.socket with 0.95.rc1: >> >> clamscan -V >> ClamAV 0.95rc1/9047/Wed Feb 25 02:59:41 2009 >> >> echo PING | socat - /var/amavis/clamd.sock >> PONG >> > > Yes, that is correct port in conig, and same port that was working > fine in your "unofficial script" and same port used with > File::Scan::ClamAV and, like I said socat works if I type PING in > from the terminal. > > All the above worked fine on 0.94.2 as is a carbon copy of the > operational system. With 0.95, File::Scan::ClamAV works fine: > > Sun Mar 1 07:38:38 2009 -> stream(127.0....@1812): > Sanesecurity.Dipl.8334.UNOFFICIAL FOUND > > as does clamdscan: > > $ clamdscan ~/ > /Users/tshaw/Library/Mail/Mac-trshaw/Drafts.imapmbox/Messages/1434.emlx: > Eicar-Test-Signature FOUND > > I am totally confused, >
What does this output: $ echo PING | strace socat - /var/tmp/clamd.socket $ echo -ne "nPING\n" | strace socat - /var/tmp/clamd.socket Best regards, --Edwin _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml