Mailing List Archive

Clamscan signature scan report
Hello ClamAV developers,

I occasionally use clamscan to perform signature matching. It's a great tool to test the unofficial signatures. However, I only get a report at the end of the cumulative/collated signatures. Is there a way to get a report of individual signature instead of cumulative. Currently, I only use one signature per database in .ndb format to test the performance of that signature. Is there a way where we can get an individual report by placing all the signatures in a single database? The current script that I use is as follows:
"/ClamAV/bin/./clamscan" -d "/Clam/Individual_sigs/Sig1.ndb" -l "/Clam/sigs_1/sig1_report.txt"
"/ClamAV/bin/./clamscan" -d "/Clam/Individual_sigs/Sig2.ndb" -l "/Clam/sigs_2/sig2_report.txt"
"/ClamAV/bin/./clamscan" -d "/Clam/Individual_sigs/Sig3.ndb" -l "/Clam/sigs_3/sig3_report.txt"
"/ClamAV/bin/./clamscan" -d "/Clam/Individual_sigs/Sig4.ndb" -l "/Clam/sigs_4/sig4_report.txt"
And so on...

I have around 200k signatures to test and can take a long time to finish.

Any help would be highly appreciated. Happy to test the beta version if needed.

Many thanks,
Vijay
_______________________________________________

clamav-devel mailing list
clamav-devel@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-devel

Please submit your patches to our Github: https://github.com/Cisco-Talos/clamav-devel/pulls

Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml
Re: Clamscan signature scan report [ In reply to ]
Looks into xargs or a for loop?

> On Jun 27, 2020, at 2:28 PM, Vijay Naidu <vijaynaidu1986@outlook.com> wrote:
>
> Hello ClamAV developers,
>
> I occasionally use clamscan to perform signature matching. It's a great tool to test the unofficial signatures. However, I only get a report at the end of the cumulative/collated signatures. Is there a way to get a report of individual signature instead of cumulative. Currently, I only use one signature per database in .ndb format to test the performance of that signature. Is there a way where we can get an individual report by placing all the signatures in a single database? The current script that I use is as follows:
> "/ClamAV/bin/./clamscan" -d "/Clam/Individual_sigs/Sig1.ndb" -l "/Clam/sigs_1/sig1_report.txt"
> "/ClamAV/bin/./clamscan" -d "/Clam/Individual_sigs/Sig2.ndb" -l "/Clam/sigs_2/sig2_report.txt"
> "/ClamAV/bin/./clamscan" -d "/Clam/Individual_sigs/Sig3.ndb" -l "/Clam/sigs_3/sig3_report.txt"
> "/ClamAV/bin/./clamscan" -d "/Clam/Individual_sigs/Sig4.ndb" -l "/Clam/sigs_4/sig4_report.txt"
> And so on...
>
> I have around 200k signatures to test and can take a long time to finish.
>
> Any help would be highly appreciated. Happy to test the beta version if needed.
>
> Many thanks,
> Vijay
> _______________________________________________
>
> clamav-devel mailing list
> clamav-devel@lists.clamav.net
> https://lists.clamav.net/mailman/listinfo/clamav-devel
>
> Please submit your patches to our Github: https://github.com/Cisco-Talos/clamav-devel/pulls
>
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
>
> http://www.clamav.net/contact.html#ml