Hi Dennis, My tar indeed exceeds these parameters, i'm using the cli of clamscan (no wrapper) but I don't see any error messages in normal mode. In the debug I do see messages that these paremeters are exceeded, so I raised these paremeters to accomodate the file size and scansize but I still doesn't work. Regards, Mischa -----Original Message-----
From: clamav-users-boun...@lists.clamav.net [mailto:clamav-users-boun...@lists.clamav.net] On Behalf Of Dennis Peterson Sent: zaterdag 12 april 2014 23:56 To: ClamAV users ML Subject: Re: [clamav-users] Finding infections in a tar-ball On 4/11/14, 1:31 AM, Mischa Coenen wrote: > Hi, > > > > Clamscan can scan the contents of tar-balls for virusses, when I tar only a eicar-file than clamav detects it. But I did a test in which i have put an eicar file in different directories including the top-directory, clamscan cannot detect any of the eicar files. I'm using ClamAV 0.98.1. > > Anybody advice what could be the issue? > > Regards > Mischa > > I see this only when the tar file exceeds --max-scansize or --max-filesize. If this the the case you should also see errors if you are running this from a command line. If you are using any kind of wrapper that hides the error text then you will see nothing. dp _______________________________________________ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/support/ml _______________________________________________ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/support/ml