[clamav-users] Calamav cannot scan tar file and gzip files?

Steven Morgan smorgan at sourcefire.com
Mon Feb 16 13:13:13 EST 2015


Manoj,

Seem like this should work. What happens if you scan your tar and tar.gz
files just using clamscan?

You can run your clamd in debug mode by setting "Foreground yes" and "Debug
yes" in clamd.conf, then run clamd from a terminal window. This may give
you an indication about why clamd does not see the inner file when using
squid. Also, "LeaveTemporaryFiles yes" will keep the inner files from
archives in the ClamAV temp directory for inspection.

Hope this helps,
Steve

On Sun, Feb 15, 2015 at 11:30 PM, Manoj Ramakrishnan <
manojramakrishnan at nbnco.com.au> wrote:

> Hi,
>
> I tried to scan tar files and tar.gz files using clamav(through squid,
> squidclamav and c-icap) but it just pass through. Both these files contain
> the "eicar.com" test file.
> But if it is a zip file then it works!!!
>
> ScanArchive parameter is enabled in clamd.conf.
>
> Do I need any special setting to scan these files? I am using a RHEL5
> server and clamd/clamav version 0.98.5
>
> Regards
> Manoj Ramakrishnan
> DevOps Engineer | POS | P +61 2 8918 5906  | M 0416 128 308
>
>
> _______________________________________________
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
>
> http://www.clamav.net/contact.html#ml
>



More information about the clamav-users mailing list