[clamav-users] ClamAV Scan - Data Read vs Data Scanned

[Al Varnell]

The eicar test file is 68 bytes long which is .000068 MB which rounded to two significant digits is 0.00 MB both scanned and read.

There are various limits, depending on file and archive types as to how much is read and/or scanned. In most cases they will be exactly the same.

-Al-

> On Nov 1, 2020, at 19:40, Ankur Sharma via clamav-users <clamav-users at lists.clamav.net> wrote:
> 
> Hi All,
> 
> I tried to scan an eicar test file and got the following scan output:
> 
> {'Scanning /tmp/bucket-file-upload/eicar_com.zip!ZIP': 'eicar.com <http://eicar.com/>', '/tmp/bucket-file-upload/eicar_com.zip': 'Win.Test.EICAR_HDB-1 FOUND', '/tmp/bucket-file-upload/eicar_com.zip!(1)ZIP': 'eicar.com <http://eicar.com/>: Win.Test.EICAR_HDB-1 FOUND', 'Known viruses': '8931107', 'Engine version': '0.102.4', 'Scanned directories': '0', 'Scanned files': '1', 'Infected files': '1', 'Data scanned': '0.00 MB', 'Data read': '0.00 MB (ratio 0.00:1)', 'Time': '22.963 sec (0 m 22 s)'}
> 
> Though it correctly mentions that the 'Infected files' is '1'. It mentions that data scanned and data read is 0.00 MB. Can someone please help me and confirm what is Data read and Data scanned ? How are these different?
> 
> Thanks a lot for your time.
> 
> -- 
> regards
> Ankur
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.clamav.net/pipermail/clamav-users/attachments/20201101/e2067e21/attachment.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4376 bytes
Desc: not available
URL: <https://lists.clamav.net/pipermail/clamav-users/attachments/20201101/e2067e21/attachment.bin>