Mailing List Archive: Clamscan signature scan report

Hello ClamAV users,

I occasionally use clamscan to perform signature matching. It's a great tool to test the unofficial signatures. However, I only get a report at the end of the cumulative/collated signatures. Is there a way to get a report of individual signature instead of cumulative. Currently, I only use one signature per database in .ndb format to test the performance of that signature. Is there a way where we can get an individual report by placing all the signatures in a single database? The current script that I use is as follows:
"/ClamAV/bin/./clamscan" -d "/Clam/Individual_sigs/Sig1.ndb" -l "/Clam/sigs_1/sig1_report.txt"
"/ClamAV/bin/./clamscan" -d "/Clam/Individual_sigs/Sig2.ndb" -l "/Clam/sigs_2/sig2_report.txt"
"/ClamAV/bin/./clamscan" -d "/Clam/Individual_sigs/Sig3.ndb" -l "/Clam/sigs_3/sig3_report.txt"
"/ClamAV/bin/./clamscan" -d "/Clam/Individual_sigs/Sig4.ndb" -l "/Clam/sigs_4/sig4_report.txt"
And so on...

I have around 200k signatures to test and can take a long time to finish.

Any help would be highly appreciated. Happy to test the beta version if needed.

Many thanks,
Vijay

Hello Vaijay,

clamscan -z is very usefull for what you need.

Example :

/ClamAV/bin/./clamscan? -z -d ?/Clam/All_sigs/Sigs.ndb? -l
?/Clam/sig_report.txt?

Le 28/06/2020 ? 05:51, Vijay Naidu via clamav-users a ?crit?:
> Hello ClamAV users,
>
> I occasionally use clamscan to perform signature matching. It?s a great
> tool to test the unofficial signatures. However, I only get a report at
> the end of the cumulative/collated signatures. Is there a way to get a
> report of individual signature instead of cumulative. Currently, I only
> use one signature per database in .ndb format to test the performance of
> that signature. Is there a way where we can get an individual report by
> placing all the signatures in a single database? The current script that
> I use is as follows:
>
> ?/ClamAV/bin/./clamscan? -d ?/Clam/Individual_sigs/Sig1.ndb? -l
> ?/Clam/sigs_1/sig1_report.txt?
>
> ?/ClamAV/bin/./clamscan? -d ?/Clam/Individual_sigs/Sig2.ndb? -l
> ?/Clam/sigs_2/sig2_report.txt?
>
> ?/ClamAV/bin/./clamscan? -d ?/Clam/Individual_sigs/Sig3.ndb? -l
> ?/Clam/sigs_3/sig3_report.txt?
>
> ?/ClamAV/bin/./clamscan? -d ?/Clam/Individual_sigs/Sig4.ndb? -l
> ?/Clam/sigs_4/sig4_report.txt?
>
> And so on?
>
> I have around 200k signatures to test and can take a long time to finish.
>
> Any help would be highly appreciated. Happy to test the beta version if
> needed.
>
> Many thanks,
>
> Vijay
>
>
>
> _______________________________________________
>
> clamav-users mailing list
> clamav-users@lists.clamav.net
> https://lists.clamav.net/mailman/listinfo/clamav-users
>
>
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
>
> http://www.clamav.net/contact.html#ml
>

--
Cordialement / Best regards,

Arnaud Jacques
G?rant de SecuriteInfo.com

T?l?phone : +33-(0)3.60.47.09.81
E-mail : aj@securiteinfo.com
Site web : https://www.securiteinfo.com
Facebook : https://www.facebook.com/pages/SecuriteInfocom/132872523492286
Twitter : @SecuriteInfoCom
Signatures for ClamAV antivirus : http://ow.ly/LqfdL

_______________________________________________

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users

Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml