[clamav-users] VirusEvent with INSTREAM

[Jan Hejl]

Hello,

i'm trying to collect samples of messages sent to the ClamAV. I'm using 
VirusEvent feature with bash script which read data from 
${CLAM_VIRUSEVENT_FILENAME}. Normally scanned with clamdscan there's 
value like 'fd[10]' or another file descriptor number, thus you can read 
the file from that descriptor. In case it is transferred trough the TCP 
protocol via INSTREAM command, the value is 'stream'.

Is there any chance to read that file from stream?

Thank you
Jan

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 3695 bytes
Desc: Elektronicky podpis S/MIME
URL: <https://lists.clamav.net/pipermail/clamav-users/attachments/20160309/cdaf7e23/attachment.bin>