Hi Steve,

 

Raising the scansize parameter from
1000M to 2000M worked, the Eicars are now detected. I would have expected error
or warning messages of clamav telling me i exceeded the scansize, but I don't 
see any messages
indicating the scan is not complete other than in the debug information.

 

Is this normal behavior or should
Clamscan issue messages which it doesn't in my situation?

 

Regards,

 

Mischa Coenen

 

=========================================================================================================

Misha,

 

I have reviewed
the debug output. You are still hitting file/scan size limits and that is
probably why it is not detecting, e.g.:

 

LibClamAV debug:
cli_updatelimits: scansize exceeded (initial: 1048576000,

consumed:
1048575997, needed: 28080)

 

Try increasing
--max-scansize until these messages disappear and see if it detects.

 

Steve

 

 

On Mon, Apr 14, 2014 at 4:48 AM,
Mischa Coenen <mc1...@live.nl> wrote:

 

> 

> 

> Hi Steve,

> I have send
you an email on your own email account with a link to the 

> debug file.

> 

> Regards,

> 

> Mischa

> 

> 

>
-----Original

>
Message-----

> 

> From: clamav-users-boun...@lists.clamav.net

> [mailto:clamav-users-boun...@lists.clamav.net] On Behalf Of Steven 

> Morgan

> 

> Sent:
vrijdag 11 april 2014 20:03

> 

> To: ClamAV
users ML

> 

> Subject:
Re: [clamav-users] Finding infections in a tar-ball

> 

> 

> 

> Mischa,

> 

> 

> 

> Can you
send me

> your file
for debugging?

> 

> 

> 

> Thanks,

> 

> Steve

                                          
_______________________________________________
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq
http://www.clamav.net/support/ml

Reply via email to