[clamav-users] Clamd instream scanning

[Al Varnell]

Somebody with better technical knowledge than I will need to get you a complete answer, but my observations tell me that if the file requires decompressed or other type of pre-processing, then temporary files are written to disk, but scans are normally conducted in memory.

Sent from my iPad

-Al-

On Apr 4, 2019, at 09:18, Wilson, Chad - US via clamav-users <clamav-users at lists.clamav.net> wrote:
> Knowledge needed please.
> 
> When streaming files to clamd for scanning, does the daemon write the file or does it handle all in memory?
> 
> We do not have the temp directory uncommented/specified, so IF it writes it first, where does it write to?
> 
> If it writes first, then do we have the risk of another on access scanner interrupting clamd?
> 
> If it handles all in memory, then no other questions. 
> Thanks.