[clamav-users] about MaxQueue

2014-02-18 Thread Tsutomu Oyamada
Hi, We like to know when a MaxQueue value of configuration file gives any influence while clamd is scanning. We are investigating matters of sessions with the following setteings. Can we confirm MaxThreads by ptree command? Could you teach us how to confirm behavior of configured value of MaxQueu

[clamav-users] Avoit Short-Circuiting on (untrusted) Pattern match

2014-02-18 Thread Torge Husfeldt
Hi, We are scanning webhosing-files from a relatively large user-base (~5M) using the clamd-engine and signature databases tweaked for the least possible false-positives. In this context we have 2 use-cases which apparently aren't met by the current implemetation. In both cases the remedy wo

Re: [clamav-users] Avoit Short-Circuiting on (untrusted) Pattern match

2014-02-18 Thread Tom Judge
Hi Torge, You can use the ALLMATCHSCAN command for clamd, this will return all the signatures that matched on the file rather than just the first. Tom On Tue, Feb 18, 2014 at 10:42 AM, Torge Husfeldt wrote: > Hi, > > We are scanning webhosing-files from a relatively large user-base (~5M) > us

Re: [clamav-users] about MaxQueue

2014-02-18 Thread Steven Morgan
Tsutomu, Take a look at the clamdtop command. There are also some unix commands that may help: ps -eLF, lsof, gdb/info threads. If these do not get you the info you are looking for, you can modify the code to put in the confirmations. The code handling threads and queues is clamd/others.c, clamd/t