[clamav-users] Clamsubmit option -p

[Shawn Webb]

On Sat, Nov 29, 2014 at 10:26 PM, Benny Pedersen <me at junc.eu> wrote:
> Is the help text correct ?
>
> Fase possitive ?
>
> If running clamsubmit do i need to extract content first with eg ripmine if
> content is in email or does clamsubmit self do all this ?
>
> What is a fp and fn ?

No need to extract files prior to submission, though it would
certainly accelerate analysis if you did. The acronym "FP" means
"False Positive"--a file that erroneously caused ClamAV to report a
virus. The acronym "FN" means "False Negative"--a file that was
erroneously reported as clean by ClamAV.

Thanks,

Shawn