[clamav-users] TCP FIN Packet Received Before Data

[Cory Parrish]

Hello, I'm trying to stream a file to clamav (V 0.99.2) using the TCP
Connection from a NodeJS server. Sometimes data is being sent back but
other times I am receiving the "FIN" packet before any data. Every time I
send a stream to be scanned, I see the result in the clamav logs, but for
some reason the result is not getting sent back on the socket consistently.
Oddly enough, if I make clamav send back an error response, I will get the
response 100% of the time. I only see inconsistency when clamav executes
the scan successfully, both when it finds a virus and when it does not find
a virus.

*A couple things that I have tried:*

1. I was wondering if this happens on very small files. So I increased the
size of the file to over 500k and I still saw the same results.

2. Next I was wondering if it might happen when clamav uses its cache to
determine that a file has already been scanned. So I changed the
DisableCache configuration to 'yes' and still saw the same thing.

Has anyone seen a problem like this in the past? Are there tests proving
the socket communication is working correctly? Please let me know what
information you would need to assist.

*Attachments*
clamd.conf - configuration used for the clam daemon.
test-file.txt - the file I am streaming to clamav.

Thanks so much for any help you can provide!

-- 
Cory Parrish
Owner, Developer, and Fellow Geek
StriveNine
-------------- next part --------------
test