The eicar test file is 68 bytes long which is .000068 MB which rounded to two significant digits is 0.00 MB both scanned and read.

There are various limits, depending on file and archive types as to how much is read and/or scanned. In most cases they will be exactly the same.

-Al-

On Nov 1, 2020, at 19:40, Ankur Sharma via clamav-users <clamav-users@lists.clamav.net> wrote:

Hi All,

I tried to scan an eicar test file and got the following scan output:

{'Scanning /tmp/bucket-file-upload/eicar_com.zip!ZIP': 'eicar.com', '/tmp/bucket-file-upload/eicar_com.zip': 'Win.Test.EICAR_HDB-1 FOUND', '/tmp/bucket-file-upload/eicar_com.zip!(1)ZIP': 'eicar.com: Win.Test.EICAR_HDB-1 FOUND', 'Known viruses': '8931107', 'Engine version': '0.102.4', 'Scanned directories': '0', 'Scanned files': '1', 'Infected files': '1', 'Data scanned': '0.00 MB', 'Data read': '0.00 MB (ratio 0.00:1)', 'Time': '22.963 sec (0 m 22 s)'}

Though it correctly mentions that the 'Infected files' is '1'. It mentions that data scanned and data read is 0.00 MB. Can someone please help me and confirm what is Data read and Data scanned ? How are these different?

Thanks a lot for your time.

--
regards
Ankur