Hi Steve,
Raising the scansize parameter from 1000M to 2000M worked, the Eicars are now detected. I would have expected error or warning messages of clamav telling me i exceeded the scansize, but I don't see any messages indicating the scan is not complete other than in the debug information. Is this normal behavior or should Clamscan issue messages which it doesn't in my situation? Regards, Mischa Coenen ========================================================================================================= Misha, I have reviewed the debug output. You are still hitting file/scan size limits and that is probably why it is not detecting, e.g.: LibClamAV debug: cli_updatelimits: scansize exceeded (initial: 1048576000, consumed: 1048575997, needed: 28080) Try increasing --max-scansize until these messages disappear and see if it detects. Steve On Mon, Apr 14, 2014 at 4:48 AM, Mischa Coenen <mc1...@live.nl> wrote: > > > Hi Steve, > I have send you an email on your own email account with a link to the > debug file. > > Regards, > > Mischa > > > -----Original > Message----- > > From: clamav-users-boun...@lists.clamav.net > [mailto:clamav-users-boun...@lists.clamav.net] On Behalf Of Steven > Morgan > > Sent: vrijdag 11 april 2014 20:03 > > To: ClamAV users ML > > Subject: Re: [clamav-users] Finding infections in a tar-ball > > > > Mischa, > > > > Can you send me > your file for debugging? > > > > Thanks, > > Steve _______________________________________________ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/support/ml