[Clamav-devel] Clamscan signature scan report

[Joel Esler (jesler)]

Looks into xargs or a for loop?

> On Jun 27, 2020, at 2:28 PM, Vijay Naidu <vijaynaidu1986 at outlook.com> wrote:
> 
> Hello ClamAV developers,
> 
> I occasionally use clamscan to perform signature matching. It's a great tool to test the unofficial signatures. However, I only get a report at the end of the cumulative/collated signatures. Is there a way to get a report of individual signature instead of cumulative. Currently, I only use one signature per database in .ndb format to test the performance of that signature. Is there a way where we can get an individual report by placing all the signatures in a single database? The current script that I use is as follows:
> "/ClamAV/bin/./clamscan" -d "/Clam/Individual_sigs/Sig1.ndb" -l "/Clam/sigs_1/sig1_report.txt"
> "/ClamAV/bin/./clamscan" -d "/Clam/Individual_sigs/Sig2.ndb" -l "/Clam/sigs_2/sig2_report.txt"
> "/ClamAV/bin/./clamscan" -d "/Clam/Individual_sigs/Sig3.ndb" -l "/Clam/sigs_3/sig3_report.txt"
> "/ClamAV/bin/./clamscan" -d "/Clam/Individual_sigs/Sig4.ndb" -l "/Clam/sigs_4/sig4_report.txt"
> And so on...
> 
> I have around 200k signatures to test and can take a long time to finish.
> 
> Any help would be highly appreciated. Happy to test the beta version if needed.
> 
> Many thanks,
> Vijay
> _______________________________________________
> 
> clamav-devel mailing list
> clamav-devel at lists.clamav.net
> https://lists.clamav.net/mailman/listinfo/clamav-devel
> 
> Please submit your patches to our Github: https://github.com/Cisco-Talos/clamav-devel/pulls
> 
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
> 
> http://www.clamav.net/contact.html#ml

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 3010 bytes
Desc: not available
URL: <https://lists.clamav.net/pipermail/clamav-devel/attachments/20200627/8b9d2fdf/attachment.bin>