On Mon, 14 Jun 2010 21:40:46 -0500 Damon Linkous <da...@memphisguru.com> wrote: > I'm scanning a Centos 5.4 server with ClamAV 0.96.1/11184 and started > the scan with > > # clamscan -ivr > > from the root directory to scan the whole server. The scan has been > running for about 8 hours and I've been checking the progress on the ssh > session that launched it. > > About 10 minutes ago I noticed that the list of files being scanned had > stopped after a bunch of output like > > Scanning /sys/devices/pci0000:00/0000:00:05.0/msi_bus > LibClamAV Warning: fmap_readpage: pread fail: asked for 4096 bytes @ > offset 0, got 0 > > The problem (besides the scan dying unfinished) is that nothing in the > /sys, /dev/ or /proc directories are supposed to be scanned to avoid > these errors. > > In my clamd.conf I've got the entry below, did I screw something up? > > # Don't scan files and directories matching regex > # This directive can be used multiple times > # Default: scan all > ExcludePath ^/proc/ > ExcludePath ^/sys/ > ExcludePath ^/dev/
clamscan doesn't use clamd.conf at all. For clamscan you need to use the command line options --exclude/--exclude-dir -- oo ..... Tomasz Kojm <tk...@clamav.net> (\/)\......... http://www.ClamAV.net/gpg/tkojm.gpg \..........._ 0DCA5A08407D5288279DB43454822DC8985A444B //\ /\ Tue Jun 15 10:24:25 CEST 2010 _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
