[clamav-users] Stream scanning

Istvan Szabo IstvanS at sfwltd.co.uk
Tue Jan 12 11:29:45 EST 2016


Hi,

I speak about linux, so it's good :)
So basically I don't need to do anything? Clamd is scanning automatically on my centos servers?
________________________________________
From: clamav-users <clamav-users-bounces at lists.clamav.net> on behalf of Yuri Voinov <yvoinov at gmail.com>
Sent: Tuesday, January 12, 2016 4:23 PM
To: clamav-users at lists.clamav.net
Subject: Re: [clamav-users] Stream scanning

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Sadly. Linux is not single OS in the world for servers.

12.01.16 22:20, Mickey Sola ?????:
> More specifically, only Linux is supported for on access scanning.
>
> While some legacy functionality may be available on OS X 10.5+ using the
> ClamAuth kernel extension, all major features currently supported heavily
> rely on the fanotify api, which is exclusive to the Linux kernel (version
> 2.6.37 and up).
>
> On Tue, Jan 12, 2016 at 10:43 AM, Yuri Voinov <yvoinov at gmail.com> wrote:
>
>>
> // Corrected. You are welcome ;)
>
> 12.01.16 21:42, Mickey Sola ?????:
> >>> Hi Istvan,
> >>>
> >>> While clamd does provide on-access scanning capabilities, that
feature is
> >>> only available on Linux/*NIX systems. On Windows, you will need to
> periodically
> >>> run a scan on the target directory.
> >>>
> >>> Cheers,
> >>> Mickey
> >>>
> >>> On Tue, Jan 12, 2016 at 9:52 AM, Istvan Szabo <IstvanS at sfwltd.co.uk>
> wrote:
> >>>
> >>>> If clamd is running on the system, it would automatically monitor the
> >>>> directory? Or how can I set to continuously monitor that
directory and
> do
> >>>> the steps that needed?
> >>>>
> >>>> So based on your suggestion the 2nd step would be the last step and
> in the
> >>>> 2nd step would scan clamd the files, but how would it monitor and how
> would
> >>>> it report? I created a script for a daily scan but it is just a scan
> not a
> >>>> real time monitoring.
> >>>> ________________________________________
> >>>> From: clamav-users <clamav-users-bounces at lists.clamav.net> on
behalf of
> >>>> Matus UHLAR - fantomas <uhlar at fantomas.sk>
> >>>> Sent: Tuesday, January 12, 2016 12:48 PM
> >>>> To: clamav-users at lists.clamav.net
> >>>> Subject: Re: [clamav-users] Stream scanning
> >>>>
> >>>> On 12.01.16 12:14, Istvan Szabo wrote:
> >>>>> Is it possible to  handle somehow this request with clamav?
> >>>>>
> >>>>>
> >>>>> 1.
> >>>>> User uploads file to web site
> >>>>> 2.
> >>>>> File is loaded into memory (byte stream)
> >>>>> 3.
> >>>>> File byte stream is sent to ClamAV for scanning
> >>>>> 4.
> >>>>> ClamAV returns OK or VIRUS
> >>>>> 5.
> >>>>> If OK, store file in the database, if VIRUS, return error to user
> >>>>>
> >>>>> I'd imagine to scan the file ClamAV will need to write the byte
stream
> >>>> into a temporary file which then gets deleted after the scan.
> >>>>
> >>>> the file is already stored as file on web server, there's no need for
> >>>> messing with it. clamd can scan it there, it just neede proper
> permissions
> >>>> for reading uploaded files.
> >>>> --
> >>>> Matus UHLAR - fantomas, uhlar at fantomas.sk ; http://www.fantomas.sk/
> >>>> Warning: I wish NOT to receive e-mail advertising to this address.
> >>>> Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
> >>>> Fighting for peace is like fucking for virginity...
> >>>> _______________________________________________
> >>>> Help us build a comprehensive ClamAV guide:
> >>>> https://github.com/vrtadmin/clamav-faq
> >>>>
> >>>> http://www.clamav.net/contact.html#ml
> >>>>
> >>>> This communication and any attachments transmitted with it is
intended
> >>>> only for the stated addressee(s) and may be confidential. Any
> unauthorised
> >>>> disclosure, use or dissemination, either whole or in part is
> prohibited. If
> >>>> you have received this email in error, please notify the SFW IT
Support
> >>>> team immediately at support at sfwltd.co.uk and delete, erase or
otherwise
> >>>> destroy this email. Opinions expressed in this email are those of the
> >>>> author and do not necessarily reflect the opinions of SFW Ltd or SFW
> India
> >>>> Pvt Ltd.
> >>>>
> >>>> SFW Ltd. Registered Office: Southern House, Station Approach, Woking,
> >>>> Surrey, GU22 7UY Registered in England No: 2740301 VAT No. 591
7842 02
> >>>>
> >>>> _______________________________________________
> >>>> Help us build a comprehensive ClamAV guide:
> >>>> https://github.com/vrtadmin/clamav-faq
> >>>>
> >>>> http://www.clamav.net/contact.html#ml
> >>>>
> >>> _______________________________________________
> >>> Help us build a comprehensive ClamAV guide:
> >>> https://github.com/vrtadmin/clamav-faq
> >>>
> >>> http://www.clamav.net/contact.html#ml
>
>>
>> _______________________________________________
>> Help us build a comprehensive ClamAV guide:
>> https://github.com/vrtadmin/clamav-faq
>>
>> http://www.clamav.net/contact.html#ml
>>
> _______________________________________________
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
>
> http://www.clamav.net/contact.html#ml

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iQEcBAEBCAAGBQJWlSiCAAoJENNXIZxhPexGYXkH/ikdEJ/t6DLWG8gVbhBTEidR
i8iGYjBANAhDFf01VAgA+ult5rMITEmqK0XopvN1773NxCmcRSOaGcgr26OgnYBI
tbs7eMtv2XJl0BfGv9d/ENwp4qF1Y7+WKNQzcEaUyA7WGGnlPm4pSAB6s00ragh/
1d+0X6swWqAaXamSx43M1piiDvesJTuEuawalhcSQBu0C3W1m2AXaSUkYeaWXFsh
g1cKGe2BWUG+0zacIlXkdhH+FqT7O/NN/zk76at6DmDFYElYRDs97c/8dKXOrtYp
oKvUqqhiCghqCT9BPtTvDlXxNZ0PLGn1lNEJZgScJqD4vHqzsTNqylLADHx4K80=
=ZzKw
-----END PGP SIGNATURE-----

_______________________________________________
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

This communication and any attachments transmitted with it is intended only for the stated addressee(s) and may be confidential. Any unauthorised disclosure, use or dissemination, either whole or in part is prohibited. If you have received this email in error, please notify the SFW IT Support team immediately at support at sfwltd.co.uk and delete, erase or otherwise destroy this email. Opinions expressed in this email are those of the author and do not necessarily reflect the opinions of SFW Ltd or SFW India Pvt Ltd.

SFW Ltd. Registered Office: Southern House, Station Approach, Woking, Surrey, GU22 7UY Registered in England No: 2740301 VAT No. 591 7842 02




More information about the clamav-users mailing list