Hello Masaru,

> clamscan and clamdscan can be used in combination with the find
> command. For example, you can use the find command to identify
> recently modified files, and then pipe the output to clamscan or
> clamdscan to scan only the modified files. This method can greatly
> reduce the scanning time, I think.
Yes, that I found evident as described in mail below. Yet, no antivirus 
including ClamAV use this approach in their product. There must be reason(s). I 
am just trying to find that reason.

Thanks in advance,
-Neel.

From: Masaru Nomiya via clamav-users <clamav-users@lists.clamav.net>
Sent: Mon, 09 Dec 2024 14:27:10
To: clamav-users@lists.clamav.net
Cc: Masaru Nomiya <nom...@lake.dti.ne.jp>
Subject: Re: [clamav-users] Using linux command "find" to get 
modified files list for scan

Hello,

In the Message;

 Subject    : Re: [clamav-users] Using linux command 
"find" to get modified files list for scan
 Message-ID 
: <1733732516.s.11406.autosave.drafts.1733732836.27...@webmail.rediffmail.com>
 Date & Time: 9 Dec 2024 08:27:16 -0000

[NR] == "neel roy" <neelsm...@rediffmail.com> has written:

[...]
NR>  When I run clamscan/clamdscan on entire file system, why
NR> doesn't it use "find" command to get the list of
NR> modified files since last time and run scan on them? In which
NR> cases,find would not work?

Sorry, I misunderstood.

clamscan and clamdscan can be used in combination with the find
command. For example, you can use the find command to identify
recently modified files, and then pipe the output to clamscan or
clamdscan to scan only the modified files. This method can greatly
reduce the scanning time, I think.

Best Regards.

---
$B(.(,(,(/WD(B     Masaru Nomiya           
        mail-to: nomiya @ lake.dti.ne.jp
$B(-!@!?WD(B
$B(1(,(,(0(B       "During testing, Sakana found that its 
system began unexpectedly
          attempting to modify its own experiment 
code to extend the time
          it had to work on a problem."
         
          -- Research AI model unexpectedly 
attempts to modify its own code
               to extend 
runtime (ars TECHNICA) --
_______________________________________________

Manage your clamav-users mailing list subscription / unsubscribe:
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/Cisco-Talos/clamav-documentation

https://docs.clamav.net/#mailing-lists-and-chat
_______________________________________________

Manage your clamav-users mailing list subscription / unsubscribe:
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/Cisco-Talos/clamav-documentation

https://docs.clamav.net/#mailing-lists-and-chat

Reply via email to