Re: [clamav-users] Scanning a zip file fails, extract it, scan with the same options and it passes

2021-10-04 Thread Mark Fortescue via clamav-users
Hi Max, Please be aware that at present, ClamAV can't scan files above 2G because of internal variable limitations. If your ZIP files are around 2G then this may be the limit you are encountering. Regards Mark. On 04/10/2021 09:37, Max Allan via clamav-users wrote: Thanks Laurent,

Re: [clamav-users] ClamAV® blog: ClamAV 0.104.0 Release Candidate is here!

2021-08-06 Thread Mark Fortescue via clamav-users
Hi Andrew, I have placed two patches on the user list that I believe may fix the issue you are seeing. I was seeing a similar issue hence the investigation and resulting patches. https://www.mail-archive.com/clamav-users@lists.clamav.net/msg50910.html and ttps://www.mail-archive.com/clamav-

Re: [clamav-users] PATCH[2]: Re: ClamAV® blog: ClamAV 0.104.0 Release Candidate is here!

2021-08-05 Thread Mark Fortescue via clamav-users
Hi Micah, Having picked up on one set of unset substitution variables I cheated and used 'find'. 'grep'. 'sed'. 'cut' and 'sort -u' to go through and find all the substitution variables and check that they were set :). Please note that the CLAMAV_USER changes or setting CLAMAVUSER in the doc

Re: [clamav-users] Opinion wanted: Change default config directory usr/clamav

2021-07-31 Thread Mark Fortescue via clamav-users
Hi Micah, On my uBuntu distributions the config files have been in /etc/clamav at least since uBuntu 10.04 LTS so I see no issue with the change. It makes /usr/local/etc consistent with /etc which is always a good thing when you are trying to debug/find/compare things when something has gone

[clamav-users] PATCH[2]: Re: ClamAV® blog: ClamAV 0.104.0 Release Candidate is here!

2021-07-30 Thread Mark Fortescue via clamav-users
Hi Micah, Please find attached patch #2 to clean up patch #1 'if' statements and fix some other issues fond (mostly documentation). The outstanding variable is LIBCLAMAV_LIBS. It is used by clamav-config.in and libclamav.pc.in. Not sure about the logic required for this one. On my OS, it is

Re: [clamav-users] Long Term Support (LTS) program proposal

2021-07-29 Thread Mark Fortescue via clamav-users
Hi All, In my world, 5 years is short. It use to take me 3 years to get a stable enough uBuntu kernel to patch in my changes. The 14.0x LTS 4.4.x kernel never became stable enough. I will be looking to the industrial Linux at 10 to 25 years for kernels for the future. For most of the sof

Re: [clamav-users] [SUSPICIOUS] PATCH: Re: ClamAV® blog: ClamAV 0.104.0 Release Candidate is here!

2021-07-28 Thread Mark Fortescue via clamav-users
have an account on GitHub, can you submit this as a PR? If not, I can submit one for you. Regards, Micah -Original Message- From: clamav-users On Behalf Of Mark Fortescue via clamav-users Sent: Wednesday, July 28, 2021 12:02 PM To: clamav-users@lists.clamav.net Cc: Mark Fortescue Su

Re: [clamav-users] [SUSPICIOUS] PATCH: Re: ClamAV® blog: ClamAV 0.104.0 Release Candidate is here!

2021-07-28 Thread Mark Fortescue via clamav-users
Micah -Original Message- From: clamav-users On Behalf Of Mark Fortescue via clamav-users Sent: Wednesday, July 28, 2021 12:02 PM To: clamav-users@lists.clamav.net Cc: Mark Fortescue Subject: [SUSPICIOUS] [clamav-users] PATCH: Re: ClamAV® blog: ClamAV 0.104.0 Release Candidate is here! Hi

[clamav-users] PATCH: Re: ClamAV® blog: ClamAV 0.104.0 Release Candidate is here!

2021-07-28 Thread Mark Fortescue via clamav-users
. Regards Mark. On 28/07/2021 00:14, Mark Fortescue via clamav-users wrote: Hi all, I have two curl installations. One is not suitable for clamav (the system installed version). How do I force cmake to pick up the correct library as it is always picking up the system library not the one in

Re: [clamav-users] ClamAV® blog: ClamAV 0.104.0 Release Candidate is here!

2021-07-28 Thread Mark Fortescue via clamav-users
. On 28/07/2021 00:14, Mark Fortescue via clamav-users wrote: Hi all, I have two curl installations. One is not suitable for clamav (the system installed version). How do I force cmake to pick up the correct library as it is always picking up the system library not the one in /usr/local/clamav/lib

Re: [clamav-users] ClamAV® blog: ClamAV 0.104.0 Release Candidate is here!

2021-07-27 Thread Mark Fortescue via clamav-users
something wrong or at least opened in an editor to see what it is actually doing. Not sure where to start if cmake does not do what it is meant to do. Regards Mark. On 28/07/2021 00:14, Mark Fortescue via clamav-users wrote: Hi all, I have two curl installations. One is not suitable

Re: [clamav-users] ClamAV® blog: ClamAV 0.104.0 Release Candidate is here!

2021-07-27 Thread Mark Fortescue via clamav-users
Hi all, I have two curl installations. One is not suitable for clamav (the system installed version). How do I force cmake to pick up the correct library as it is always picking up the system library not the one in /usr/local/clamav/lib. In order to move to cmake it would be useful to have

Re: [clamav-users] ClamAV® blog: ClamAV 0.104.0 Release Candidate is here!

2021-07-27 Thread Mark Fortescue via clamav-users
Hi Joel, One quick answer to why people do not upgrade the OS is that the hardware does not support the upgrade (mostly due to memory and x86_64). I work with embedded systems where the code is very specific to the hardware so new hardware is not an option. For others it may just be the has

Re: [clamav-users] ClamAV® blog: ClamAV 0.104.0 Release Candidate is here!

2021-07-26 Thread Mark Fortescue via clamav-users
Hi Andrew, My reading of this small section of the log is that the tests failed because the response was not as expected: 'Wrong reply for command' The error seems to be due to the use of a symlink /home/frans/tw/data to /mnt/data/fdb-data. The tests scripts need to do more work if they

Re: [clamav-users] Warning: No matches found for: clamav on CentOS Linux release 7.9.2009 (Core)

2021-07-19 Thread Mark Fortescue via clamav-users
Hi Kaushal, You have a small configuration error in you systemd/clamd setup. Not sure if it is the best way but try: sudo cp -p /etc/clamd.d/scan.conf /etc/clamd.d/server.conf Regards Mark. On 19/07/2021 19:47, Matus UHLAR - fantomas wrote: On 20.07.21 00:08, Kaushal Shriyan via cla

Re: [clamav-users] New installation 103.3; failing freshclam

2021-07-19 Thread Mark Fortescue via clamav-users
Hi Paul, Check out what SSL groups are set in /etc/groups. On my uBuntu, the SSL directories are (edited out dates/size): drwxr-xr-x 3 root root /etc/ssl/certs/ drwx--x--- 2 root ssl-cert /etc/ssl/private/ SSL/Curl will complain about these if not set correctly so 'private' and 'certs' wil

Re: [clamav-users] How to make freshclam to update existing files?

2021-07-08 Thread Mark Fortescue via clamav-users
Hi Michael, How much free user disk space do you have ? I had this sort of problem when I ran out of disk space. The database files need to be uncompressed to apply the daily diffs so you need at least 3 Gig of user disk space free in the database directory. Regards Mark. On 08/07/2

Re: [clamav-users] freshclam getfile failed - and clamav links Cloudfare 1020 error.

2021-03-10 Thread Mark Fortescue via clamav-users
Hi Rémy, This is not a cloudflare issue. This is an EOL issue. You need to update to the latest version of clamav. If the latest pre-built version is 0.99 then you will probably have to learn to build from source. Regards Mark. On 10/03/2021 16:49, Rémy DODIN via clamav-users wrote:

Re: [clamav-users] ClamAV Scan - Data Read vs Data Scanned

2020-11-04 Thread Mark Fortescue via clamav-users
number of 16kb blocks, then it should be counting at least 0.016384 MB (or 0.015625 MiB) for tiny files. By normal rounding rules this should display as 0.02 MB/MiB. On Tue, 3 Nov 2020 17:50:18 + Mark Fortescue via clamav-users wrote: > Hi all, > >

Re: [clamav-users] ClamAV Scan - Data Read vs Data Scanned

2020-11-03 Thread Mark Fortescue via clamav-users
Hi all, I would call this a bug. Scanning 1 byte is the same as scanning 1 block. When storing things in blocks is is always important to round up or you get a false impression of reality. You can't store 100 bytes in 0 disk sectors of 128 bytes. It is always 1 disk sector. Can you not jus

Re: [clamav-users] clamd scan problem

2020-10-31 Thread Mark Fortescue via clamav-users
Hi Tsutomu, How much memory is available on your AIX system ? Recommendations vary but I think the general rule will be you need 4GBytes or more for any server that has to do more than just run Clamd. Anything less that 2GBytes is going to be very slow or fail. Regards Mark. On 31/1

Re: [clamav-users] Clamd.exe

2020-10-23 Thread Mark Fortescue via clamav-users
Hi, Have you tried C:\\Windows or C:/Windows. Just a thought. Regards Mark. On 23/10/2020 19:46, Marcy Rogers via clamav-users wrote: Ged Thank you for the advice. When I installed Clamav for Windows, the install places the Clamav in the c:\program files. I followed the instructions f

Re: [clamav-users] Thousands of log entries for real filename

2020-09-11 Thread Mark Fortescue via clamav-users
Hi Royce, There may be an issue with the way you are running clamonacc. Scanning the hole filing system can cause recursion as the system may try to re-scan the log every time it is updated generating a new log entry or may try to scan special files that are not suitable for scanning. Stop t

Re: [clamav-users] Problems compiling 0.102.4 on OLD system

2020-07-17 Thread Mark Fortescue via clamav-users
Hi Kevin, It looks like you will have to create/enable private versions of the openat(), ranameat() and unlinkat() functions. These can be simulated using regular C functions open(), unlink(), rename(), stat() and readdir(). You will need to get manual pages for openat(), ranameat() and un

Re: [clamav-users] freshclam in clamav 0.102.2 stuck in cli_tgzload

2020-03-21 Thread Mark Fortescue via clamav-users
Hi Pierluigi, Had a quick look at an older version of the code. It probably has not changed too much. To loop as described, it means that fseek() and ftell() are not working properly in libclamav/cvd.c. Just looking at the definitions of the types, there may be an issue with 'size' and 'pa

Re: [clamav-users] 0.102.1 and Solaris 11.3...

2019-11-30 Thread Mark Fortescue via clamav-users
Hi Gary, How much memory do you have available. You probably need 8G or more of ram for the latest and greatest as my understanding is that may be storing two copies of the databases in ram to speed up database reloading delays. Your SSL library is running out of memory after downloading the

Re: [clamav-users] Stop clamdscan from stepping on itself?

2019-10-21 Thread Mark Fortescue via clamav-users
Hi, One point that seems to have been missed is that it is that 'clamdscan' is not necessarily creating the files in '/tmp'. It is most likely 'clamd' which is a separate independent program. Given this, 'clamdscan' will not know what files to exclude form '/tmp' unless the clamd/clamdscan co

Re: [clamav-users] Continuous increase of startup time (is daily.cld broken?)

2019-10-10 Thread Mark Fortescue via clamav-users
Hi, You are forgetting things like embedded systems in hospitals that can't reasonably be updated. The NHS got stung by this with XP and Microsoft had to produce a post EOL fix. Outside of the computer industry, software and hardware move forward at a snails pace. Many systems still use Wi

Re: [clamav-users] fanotify allowed in kernel, clamd running as root, clamd complaining it needs to run as root

2019-09-04 Thread Mark Fortescue via clamav-users
Hi Jeff, Looks like Apparmor may be stepping in and preventing access. Have you checked that Apparmor has been changed to give clamd the required permissions ? Regards Mark. On 03/09/2019 22:01, Jeff Blaine via clamav-users wrote: Hello all, I'm experiencing something odd on Ubuntu

Re: [clamav-users] Clamav with a samba server ?

2019-07-29 Thread Mark Fortescue via clamav-users
Hi Edouard, If you are unsure how it works then it is best to try it out on a stand alone set-up that is not in use by other users. Set up a clean system with samba and clamav and use you own host to connect to it so that no other users are involved. You can then try various things without r