Mailing List Archive

On Wed, Jan 15, 2014 at 12:22 PM, Jeff Minelli <jgm106@psu.edu> wrote:

> Hi, my group currently uses clamav in our rails apps. We are trying to
> find ways to speed up testing on TravisCI. One of our issues is that
> freshclam needs to run prior to our testing. This seems to add a lot of
> buidl/testing time.
>
> Is there a test or stub main.cvd (and daily.cvd?) that we can use or
> create for our needs (to reduce download times of the current cvd files)?
> We don’t need to test for specific viruses, just test that the clamav call
> is working.
>
> Does anyone have suggestions or stub files we can have?
>
> Thanks,
>
> -jeff
> _______________________________________________
> http://lurker.clamav.net/list/clamav-devel.html
> Please submit your patches to our Bugzilla: http://bugs.clamav.net
>


If this is for testing the non-freshclam components only, you could go with
a non-CVD virus database. As long as ClamAV loads at least one signature,
it will run.

For example, you could have a "test.ndb" file that contains the following
signature. Then the only thing it will detect is EICAR, but it will load
much faster.
Eicar-Test-Signature:0:0:58354f2150254041505b345c505a58353428505e2937434329377d2445494341522d5354414e444152442d414e544956495255532d544553542d46494c452124482b482a

If you have other test files you choose to use, you could write signatures
to alert on those and use those for test cases.

Hope this helps,

Dave R.

--
---
Dave Raynor
Vulnerability Research Team
_______________________________________________
http://lurker.clamav.net/list/clamav-devel.html
Please submit your patches to our Bugzilla: http://bugs.clamav.net

On Jan 15, 2014, at 2:29 PM, David Raynor <draynor@sourcefire.com> wrote:
> If this is for testing the non-freshclam components only, you could go with
> a non-CVD virus database. As long as ClamAV loads at least one signature,
> it will run.
>
> For example, you could have a "test.ndb" file that contains the following
> signature. Then the only thing it will detect is EICAR, but it will load
> much faster.
> Eicar-Test-Signature:0:0:58354f2150254041505b345c505a58353428505e2937434329377d2445494341522d5354414e444152442d414e544956495255532d544553542d46494c452124482b482a
>
> If you have other test files you choose to use, you could write signatures
> to alert on those and use those for test cases.

Thanks a ton, that was exactly what we needed!!!

-jeff

_______________________________________________
http://lurker.clamav.net/list/clamav-devel.html
Please submit your patches to our Bugzilla: http://bugs.clamav.net