Re: [clamav-users] unexplainable tar behaviour

2019-10-30 Thread Steffen Sledz
On 29.10.19 15:10, Alan Stern wrote: > Try bisection... That makes things even more confusing. I have shared the tar twice with different ratios. But the individual parts are all reported as clean. # split -b 80M all.tar all # ll total 445768 -rw-r--r-- 1 root root 83886080 30. Okt 07:57 alla

Re: [clamav-users] How to boost clamav? Reloading database results in a talking timeout?

2019-10-30 Thread G.W. Haywood via clamav-users
Hi Reio, On Mon, 28 Oct 2019, Reio Remma via clamav-users wrote: ... I've been running a patched 101.4 for a few weeks now and unfortunately I'm observing a memory leak from the multithreaded database reloads. I'm observing clamd memory usage going up when the new database loads ... The pro

Re: [clamav-users] unexplainable tar behaviour

2019-10-30 Thread G.W. Haywood via clamav-users
Hi there, On Wed, 30 Oct 2019, Steffen Sledz wrote: On 29.10.19 15:10, Alan Stern wrote: Try bisection... That makes things even more confusing. I don't see what's confusing about this. The match is just an expression. It isn't magic. You could do just the same thing from the command lin

Re: [clamav-users] unexplainable tar behaviour

2019-10-30 Thread Steffen Sledz
On 30.10.19 13:03, G.W. Haywood via clamav-users wrote: > I don't see what's confusing about this. > > The match is just an expression.  It isn't magic.  You could do just > the same thing from the command line for example with 'grep' although > it might take a while and you might need to read up

Re: [clamav-users] unexplainable tar behaviour

2019-10-30 Thread Graeme Fowler via clamav-users
On 30/10/2019, 12:43, "clamav-users on behalf of Steffen Sledz" wrote: > Here "the expression" matches in all.tar, but not in allaa, not in allab, and > not in allac. Hmmm again? > > For me this is confusing! If you look back at the response from Al Varnell, you'll see that the decoded signat

Re: [clamav-users] unexplainable tar behaviour

2019-10-30 Thread Steffen Sledz
On 30.10.19 13:52, Graeme Fowler via clamav-users wrote: > If you look back at the response from Al Varnell, you'll see that the decoded > signature has several parts, all joined together by wildcard matches. > > It's quite plausible that the match is on the first few bytes, some bytes > several

[clamav-users] Logwatch not showing "Viruses detected"

2019-10-30 Thread Robert Kudyba
This might be off topic to the list. We have Clam AV running on Fedora 30 with clamav-milter, clamav-0.101.4-1.fc30.x86_64, and sendmail. On one server the logwatch emails do send a daily recap as desired such as this stanza: - Clamav Begin Viruses det

[clamav-users] ClamAV 0.102.0 freshclam errors.

2019-10-30 Thread Reio Remma via clamav-users
Hello! I started testing 0.102.0 today, but I'm running into problems with freshclam. Compiled from source on CentOS 8: $ sudo /usr/local/bin/freshclam ClamAV update process started at Thu Oct 31 01:04:40 2019 ERROR: Failed to change back to original directory /my/current/dir double free or c

Re: [clamav-users] ClamAV 0.102.0 freshclam errors.

2019-10-30 Thread Al Varnell via clamav-users
I would hold off on that for a bit more as there are some known bugs that are being worked with some degree of urgency. Recommend you wait for 0.102.1 or the current development source. Sent from my iPad -Al- > On Oct 30, 2019, at 16:09, Reio Remma via clamav-users > wrote: > > I started te

Re: [clamav-users] Logwatch not showing "Viruses detected"

2019-10-30 Thread G.W. Haywood via clamav-users
Hi there, On Wed, 30 Oct 2019, Robert Kudyba wrote: This might be off topic to the list. We have Clam AV running on Fedora 30 with clamav-milter, clamav-0.101.4-1.fc30.x86_64, and sendmail. On one server the logwatch emails do send a daily recap as desired ... ... On the other server, logwatch