[clamav-users] Finding infections in a tar-ball

[Mischa Coenen]

Hi Dennis,
My tar indeed exceeds these parameters, i'm using the cli of clamscan (no wrapper) but I don't see any error messages in normal mode. In the debug I do see messages that these paremeters are exceeded, so I raised these paremeters to accomodate the file size and scansize but I still doesn't work.
Regards,
Mischa
-----Original
Message-----

From: clamav-users-bounces at lists.clamav.net
[mailto:clamav-users-bounces at lists.clamav.net] On Behalf Of Dennis Peterson

Sent: zaterdag 12 april 2014 23:56

To: ClamAV users ML

Subject: Re: [clamav-users] Finding infections in a tar-ball

 

On 4/11/14, 1:31
AM, Mischa Coenen wrote:

> Hi,

> 

>   

> 

> Clamscan
can scan the contents of tar-balls for virusses, when I tar only a eicar-file
than clamav detects it. But I did a test in which i have put an eicar file in
different directories including the top-directory, clamscan cannot detect any
of the eicar files. I'm using ClamAV 0.98.1.

> 

> Anybody
advice what could be the issue?

> 

> Regards

> Mischa

>                                                                            

> 

I see this only
when the tar file exceeds --max-scansize or --max-filesize. If this the the
case you should also see errors if you are running this from a command line. If
you are using any kind of wrapper that hides the error text then you will see
nothing.

 

dp

_______________________________________________

Help us build a
comprehensive ClamAV guide:

https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/support/ml