Hi Chad, Some file types cannot be handled in memory, although it will keep things in memory as much as possible.
As noted in the clamd sample config: # Optional path to the global temporary directory. # Default: system specific (usually /tmp or /var/tmp). #TemporaryDirectory /var/tmp The default temp directory, if one is not specified, is system specific, and is likely to be /tmp or /var/tmp. -Micah From: clamav-users <clamav-users-boun...@lists.clamav.net> on behalf of "Wilson, Chad - US via clamav-users" <clamav-users@lists.clamav.net> Reply-To: ClamAV users ML <clamav-users@lists.clamav.net> Date: Thursday, April 4, 2019 at 12:18 PM To: "clamav-users@lists.clamav.net" <clamav-users@lists.clamav.net> Cc: "Wilson, Chad - US" <cwil...@caci.com> Subject: [clamav-users] Clamd instream scanning Knowledge needed please. When streaming files to clamd for scanning, does the daemon write the file or does it handle all in memory? We do not have the temp directory uncommented/specified, so IF it writes it first, where does it write to? If it writes first, then do we have the risk of another on access scanner interrupting clamd? If it handles all in memory, then no other questions. Thanks.
_______________________________________________ clamav-users mailing list clamav-users@lists.clamav.net https://lists.clamav.net/mailman/listinfo/clamav-users Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml