Re: [Clamav-users] Libclamav and zip files

2005-07-22 Thread Jim Maul
Eric Scopinho wrote: But if I do that, some side effects could happen like: - I'll need free space to store the file. - The infected packets may get in while I store the next packets to scan. - I have to download the whole file before send it to the end-user. I'm trying to develop some sort of

Re: [Clamav-users] Libclamav and zip files

2005-07-22 Thread Eric Scopinho
Dennis Peterson wrote: Eric Scopinho said: But if I do that, some side effects could happen like: - I'll need free space to store the file. You're not properly committed and funded to support this activity. Maybe. - The infected packets may get in while I store the next packets to scan

Re: [Clamav-users] Libclamav and zip files

2005-07-22 Thread Eric Scopinho
Jason Haar wrote: Eric Scopinho wrote: But if I do that, some side effects could happen like: - I'll need free space to store the file. - The infected packets may get in while I store the next packets to scan. - I have to download the whole file before send it to the end-user. How else coul

Re: [Clamav-users] Libclamav and zip files

2005-07-21 Thread Dennis Peterson
Eric Scopinho said: > But if I do that, some side effects could happen like: > > - I'll need free space to store the file. You're not properly committed and funded to support this activity. > - The infected packets may get in while I store the next packets to scan. There is no way on earth you c

RE: [Clamav-users] Libclamav and zip files

2005-07-21 Thread Matthew.van.Eerde
Jason Haar wrote: > However, I think you'll be out of luck. The only "network virus > scanners" I know of are big beasts - because they effectively have to > inline translate packets back to specific protocols (such as > SMB/CIFS), pull the data content out, then run real AV over the fully > formed

Re: [Clamav-users] Libclamav and zip files

2005-07-21 Thread Jason Haar
Eric Scopinho wrote: But if I do that, some side effects could happen like: - I'll need free space to store the file. - The infected packets may get in while I store the next packets to scan. - I have to download the whole file before send it to the end-user. How else could you catch a virus

Re: [Clamav-users] Libclamav and zip files

2005-07-21 Thread Eric Scopinho
But if I do that, some side effects could happen like: - I'll need free space to store the file. - The infected packets may get in while I store the next packets to scan. - I have to download the whole file before send it to the end-user. I'm trying to develop some sort of firewall+anti-virus us

RE: [Clamav-users] Libclamav and zip files

2005-07-21 Thread Matthew.van.Eerde
Eric Scopinho wrote: > The problem is that I'm using libclamav directly (not clamd), and I > dont't have the entire zip file. While the file is sent over the > network, passing through my firewall, I'm catching the packets, > storing each one and scanning using cl_scandesc from libclamav. Catch > i

Re: [Clamav-users] Libclamav and zip files

2005-07-21 Thread Eric Scopinho
The problem is that I'm using libclamav directly (not clamd), and I dont't have the entire zip file. While the file is sent over the network, passing through my firewall, I'm catching the packets, storing each one and scanning using cl_scandesc from libclamav. Catch it? Samuel Benzaquen wrote:

RE: [Clamav-users] Libclamav and zip files

2005-07-21 Thread Samuel Benzaquen
> -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of Eric Scopinho > > Long Question: > I'm doing some tests with libipq (kind of userspace packet filter). > I get network packets, write them in small temp files and scan using > cl_scandesc from libclamav, i