[clamav-users] Streaming support in ClamD

[P K]

Hi jason,

Its nice of you reviewing other commercial products. I have doubt on
below mentioned things.

As you said c-icap is able to stream. Did you verified same with
packet capture?
I did a packet capture and observed when all packets are received by
C-icap then
it connect to Clamd and sends all response data to clamd servers in port 3310.

Then how can we say it supports streaming mode?
Maybe it works faster than other commercial product but it doesn't
mean its did a stream support
and can give bad performance when connections keep increasing.

Can you make sure its streaming for you by packet capture on icap server?

If possible can you post config of c-icap and clamd so i can try locally here.

Thanks for your insight.

-------------------------------------------------------------------------
c-icap using clam seems to be able to "stream": a large download starts
flowing to the client very quickly (which is what havp as an "AV proxy"
did really well too) - whereas all the commercial ones I've tried seem
to effectively block until the content is passed to ICAP, so it can run
AV over the file in it's entirety and then throws it at the client. End
result is wigged out users. (BTW: they don't totally block - but they
"trickle" at such an absurd rate that they might as well have blocked)


On Thu, Jul 2, 2015 at 12:57 PM, P K <pkopensrc at gmail.com> wrote:

> Hi guys,
>
> Waiting for your reply. It should be simpler answer.
>
> Does ClamAv support virus checking in stream mode for large files?
>
> If i have file size of 10Mb do i have to send all data to clamAv and
> clamAv will send status ok
> or it can scan data in each packet and return status for each segment?
>
> Thanks
>
>
> On Tue, Jun 30, 2015 at 12:28 PM, P K <pkopensrc at gmail.com> wrote:
>
>> Hi Guys,
>>
>> I am new to Clamd and was trying to use it for virus scanning.
>>
>> I used squid + icap + clamAv.
>>
>> But i seen once all data is recieved clamAv INSTREAM is called and data
>> is passed to it.
>>
>> Is it issue with icap server or Clamd doesn't support streaming support?
>>
>> Any guidance will be helpful for me
>> and how can we make ClamAv streaming support.
>>
>> Awaiting for reply.
>>
>
>