I agree Henrik. But my question is if we are supplying a text unzip data of 10-20M and if clamAv reads all 10-20M data before scanning its a big overhead in clamAv server and infrastructure providing data to it. since they have to buffer complete 10-20M data.
It will increase CPU and memory of Infrastructure. I think other commercial anti virus vendors be supporting streaming mode for virus scanning. Thanks On Thu, Jul 2, 2015 at 9:30 PM, <clamav-users-requ...@lists.clamav.net> wrote: > Send clamav-users mailing list submissions to > clamav-users@lists.clamav.net > > To subscribe or unsubscribe via the World Wide Web, visit > http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users > or, via email, send a message with subject or body 'help' to > clamav-users-requ...@lists.clamav.net > > You can reach the person managing the list at > clamav-users-ow...@lists.clamav.net > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of clamav-users digest..." > > > Today's Topics: > > 1. Re: Streaming support in ClamD (P K) > 2. Re: Streaming support in ClamD (Henrik K) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Thu, 2 Jul 2015 12:57:00 +0530 > From: P K <pkopen...@gmail.com> > To: clamav-users@lists.clamav.net > Subject: Re: [clamav-users] Streaming support in ClamD > Message-ID: > < > cal0j0dfh311g4tgyvuzju1lyoqffqf+30v8jseo482wpjpg...@mail.gmail.com> > Content-Type: text/plain; charset=UTF-8 > > Hi guys, > > Waiting for your reply. It should be simpler answer. > > Does ClamAv support virus checking in stream mode for large files? > > If i have file size of 10Mb do i have to send all data to clamAv and clamAv > will send status ok > or it can scan data in each packet and return status for each segment? > > Thanks > > > On Tue, Jun 30, 2015 at 12:28 PM, P K <pkopen...@gmail.com> wrote: > > > Hi Guys, > > > > I am new to Clamd and was trying to use it for virus scanning. > > > > I used squid + icap + clamAv. > > > > But i seen once all data is recieved clamAv INSTREAM is called and data > is > > passed to it. > > > > Is it issue with icap server or Clamd doesn't support streaming support? > > > > Any guidance will be helpful for me > > and how can we make ClamAv streaming support. > > > > Awaiting for reply. > > > > > ------------------------------ > > Message: 2 > Date: Thu, 2 Jul 2015 12:55:54 +0300 > From: Henrik K <h...@hege.li> > To: clamav-users@lists.clamav.net > Subject: Re: [clamav-users] Streaming support in ClamD > Message-ID: <20150702095554.ga32...@hege.li> > Content-Type: text/plain; charset=us-ascii > > > Let's say you have a zip file. How do you expect ClamAV to scan it packet > by > packet? Or any other data really. I think there are very few wild > signatures in database that are allowed to match any position anywhere in a > "file". Only reliable way is to scan a complete file, so it knows the > length and can decode it properly etc. > > The now abandoned HAVP proxy scanner does many tricks (filesystem mandatory > locking to "pseudo-stream" files into clamav, zip header prefetch etc) to > achieve near realtime scanning for large files and reduce "user hanging" to > a minimum. I guess this is what you are after, but ICAP can't achieve such > trickery. > > > On Thu, Jul 02, 2015 at 12:57:00PM +0530, P K wrote: > > Hi guys, > > > > Waiting for your reply. It should be simpler answer. > > > > Does ClamAv support virus checking in stream mode for large files? > > > > If i have file size of 10Mb do i have to send all data to clamAv and > clamAv > > will send status ok > > or it can scan data in each packet and return status for each segment? > > > > Thanks > > > > > > On Tue, Jun 30, 2015 at 12:28 PM, P K <pkopen...@gmail.com> wrote: > > > > > Hi Guys, > > > > > > I am new to Clamd and was trying to use it for virus scanning. > > > > > > I used squid + icap + clamAv. > > > > > > But i seen once all data is recieved clamAv INSTREAM is called and > data is > > > passed to it. > > > > > > Is it issue with icap server or Clamd doesn't support streaming > support? > > > > > > Any guidance will be helpful for me > > > and how can we make ClamAv streaming support. > > > > > > Awaiting for reply. > > > > > _______________________________________________ > > Help us build a comprehensive ClamAV guide: > > https://github.com/vrtadmin/clamav-faq > > > > http://www.clamav.net/contact.html#ml > > > ------------------------------ > > Subject: Digest Footer > > _______________________________________________ > clamav-users mailing list > clamav-users@lists.clamav.net > http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users > https://github.com/vrtadmin/clamav-faq > > http://www.clamav.net/contact.html#ml > > ------------------------------ > > End of clamav-users Digest, Vol 130, Issue 2 > ******************************************** > _______________________________________________ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml
