[clamav-users] Clamscan taking a very long time

[Michael Newman]

> G.W. Haywood wrote:

> So I guess the errors that you're asking about are noted amongst the 7000+
> lines of output of which you have posession.  You might want to look
> into some of the text processing tools available, such as 'grep'.

Using the --quiet option only logs error messages including infected files.

Combing that with the --infected option (Only print infected files) means that non-infected files that produced an error are not logged.

Removing the --infected option from the command in my script results in a log that includes both infected files and files that produced an error or warning. No need for debug or grep.

I included the following file in a test scan:

-rw-------    1 root     wheel    428688 Jan  5 06:02 clam.txt

I also included testfile.txt, the Eicar-Test-Signature

Here's the log file:

=====
/users/mnewman/desktop/bw.log: Empty file
/users/mnewman/desktop/.localized: Empty file
/users/mnewman/desktop/clam.txt: Access denied
/users/mnewman/desktop/Relocated Items: Symbolic link
/users/mnewman/desktop/PowerWalker: Symbolic link
/users/mnewman/desktop/testfile.txt: Eicar-Test-Signature FOUND

----------- SCAN SUMMARY -----------
Known viruses: 6643097
Engine version: 0.102.1
Scanned directories: 1
Scanned files: 52
Infected files: 1
Total errors: 1
Data scanned: 13.82 MB
Data read: 78.07 MB (ratio 0.18:1)
Time: 10.505 sec (0 m 10 s)
=====

I'm assuming that "Access denied" is the error mentioned in the summary and that the other files listed are in the nature of warnings.

If I run that same scan using the --infected option, I get this log which does not include the error and warnings:

=====
/users/mnewman/desktop/testfile.txt: Eicar-Test-Signature FOUND

----------- SCAN SUMMARY -----------
Known viruses: 6643097
Engine version: 0.102.1
Scanned directories: 1
Scanned files: 52
Infected files: 1
Total errors: 1
Data scanned: 13.82 MB
Data read: 78.07 MB (ratio 0.18:1)
Time: 10.282 sec (0 m 10 s)
=====

I haven't been able to find a way to log only errors and not warnings.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.clamav.net/pipermail/clamav-users/attachments/20200106/6391e722/attachment.htm>