Ángel,
Thanks! I've added a link to your email (and attached example) to our Jira task
for improving VirusEvent. We'll definitely try it out.
-Micah
Micah Snyder
ClamAV Development
Talos
Cisco Systems, Inc.
On 2/16/20, 9:34 PM, "clamav-users on behalf of Ángel via clamav-users"
wrote:
On 2020-02-11 at 16:57 +, Mickey Sola (micksola) via clamav-users
wrote:
> Wanted to add a bit of insight to this convo from the dev side of
> things:
>
> VirusEvent currently works by forking the existing clamd process into
> a new, short-lived process that handles execution of the user's
> s
Thank you both, I spun up a larger instance (t3a.xlarge) and everything is
working as expected now.
*Tom Ossman*
toss...@aspirevc.com | aspirevc.com | +1.717.468.0293
100 North Queen Street | Suite 300 | Lancaster, PA 17603
Engage with us on Twitter | LinkedIn
Wanted to add a bit of insight to this convo from the dev side of things:
VirusEvent currently works by forking the existing clamd process into a new,
short-lived process that handles execution of the user's script.
This is a legacy design choice and is problematic for a number of reasons--most
Hi there,
On Tue, 11 Feb 2020, Tom Ossman via clamav-users wrote:
... the VirusEvent script (also cleansed).
Does the script contain the first two lines as in the version which
you sent to me? If so, remove them. See the 'man' page for the
'file' utility and use it on your script. :)
Are
>
> > ... the VirusEvent script (also cleansed).
>
> Does the script contain the first two lines as in the version which
> you sent to me? If so, remove them. See the 'man' page for the
> 'file' utility and use it on your script. :)
>
> Are you refering to the comment and shebang? If so, the comm
Hi there,
Thanks for the excellent extra information, it makes things a lot clearer.
On Mon, 10 Feb 2020, Tom Ossman via clamav-users wrote:
... the VirusEvent script (also cleansed).
Does the script contain the first two lines as in the version which
you sent to me? If so, remove them. Se
Hello,
> > So I have Clam setup in network mode.
>
> I'm not sure that I know what that means. Please elaborate in as much
> detail as it would take for me to reproduce your system.
>
> The whole setup is in AWS, I have one instance setup as a "ClamAV server"
and 7 instances setup as "ClamAV cli
Hi there,
On Thu, 6 Feb 2020, Tom Ossman via clamav-users wrote:
So I have Clam setup in network mode.
I'm not sure that I know what that means. Please elaborate in as much
detail as it would take for me to reproduce your system.
On the server I have the VirusEvent line in the clamd.conf f