Mailing List Archive

clamdscan: show clean files?
Hello,

we like to scan directories an gather verbose reports. These must include information about the scan result for each file.
Using clamdscan, this does not happen: clamdscan inform only on infected files.

# clamdscan --version
ClamAV 1.0.1

# ls -l /tmp/files/
total 8
-rw-r--r-- 1 root root 27 M?r 13 08:31 clean.txt
-rw-r--r-- 1 root root 69 M?r 13 08:32 EICAR.COM

# clamdscan --no-summary /tmp/files/
/tmp/files/EICAR.COM: Eicar-Signature FOUND

Using clamscan, also clean files are listed:

# clamscan --no-summary /tmp/files/
/tmp/files/EICAR.COM: Eicar-Signature FOUND
/tmp/files/clean.txt: OK

And this is exactly what we like to see using clamdscan.
Any hints are appreciated ...

Thanks
Andreas



- Intern -

________________________________
Datenschutz
Informationen zum Umgang mit Ihren personenbezogenen Daten bei DATEV finden Sie unter https://www.datev.de/dsgvo-information
________________________________
DATEV eG
90329 N?rnberg
Telefon: +49 911 319-0

E-Mail: info@datev.de
Internet: https://www.datev.de
Sitz: 90429 N?rnberg, Paumgartnerstra?e 6 - 14
Registergericht N?rnberg, GenReg Nr. 70

Vorstand
Prof. Dr. Robert Mayr (Vorsitzender)
Prof. Dr. Peter Krug (stellv. Vorsitzender)
Julia Bangerth
Prof. Dr. Christian B?r
Diana Windmei?er

Vorsitzender des Aufsichtsrates: Nicolas Hofmann
Re: clamdscan: show clean files? [ In reply to ]
Hello Andreas,

please try in Terminal:

man clamscan or clamscan --help to see which option it have OR
man clamdscan or clamdscan --help to see his options

I prefer here on my system clamscan, this has much more additional parameters as clamdscan


kind greetings
Marc

Von / From: Clamav User Mailinglist <mailto:clamav-users@lists.clamav.net>
An / To: Newcomer01 <mailto:newcomer01@posteo.de>
CC / CC: Schulze, Andreas <mailto:andreas.schulze@datev.de>
Gesendet / Sent: Montag, März 13, 2023 um 09:03 (at 09:03 AM) +0100
Betreff / Subject: [clamav-users] clamdscan: show clean files?
>
> Hello,
>
> we like to scan directories an gather verbose reports. These must include information about the scan result for each file.
>
> Using clamdscan, this does not happen: clamdscan inform only on infected files.
>
> # clamdscan --version
>
> ClamAV 1.0.1
>
> # ls -l /tmp/files/
>
> total 8
>
> -rw-r--r-- 1 root root 27 Mär 13 08:31 clean.txt
>
> -rw-r--r-- 1 root root 69 Mär 13 08:32 EICAR.COM
>
> # clamdscan --no-summary /tmp/files/
>
> /tmp/files/EICAR.COM: Eicar-Signature FOUND
>
> Using clamscan, also clean files are listed:
>
> # clamscan --no-summary /tmp/files/
>
> /tmp/files/EICAR.COM: Eicar-Signature FOUND
>
> /tmp/files/clean.txt: OK
>
> And this is exactly what we like to see using clamdscan.
>
> Any hints are appreciated …
>
> Thanks
>
> Andreas
>
>
> – Intern –
>
> ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
> *Datenschutz*
> Informationen zum Umgang mit Ihren personenbezogenen Daten bei DATEV finden Sie unter https://www.datev.de/dsgvo-information
> ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
> *DATEV eG*
> 90329 Nürnberg
> Telefon: +49 911 319-0
> E-Mail: info@datev.de
> Internet: https://www.datev.de
> Sitz: 90429 Nürnberg, Paumgartnerstraße 6 - 14
> Registergericht Nürnberg, GenReg Nr. 70
>
>
> *Vorstand*
> Prof. Dr. Robert Mayr (Vorsitzender)
> Prof. Dr. Peter Krug (stellv. Vorsitzender)
> Julia Bangerth
> Prof. Dr. Christian Bär
> Diana Windmeißer
>
> Vorsitzender des Aufsichtsrates: Nicolas Hofmann
>
>
>
> _______________________________________________
>
> Manage your clamav-users mailing list subscription / unsubscribe:
> https://lists.clamav.net/mailman/listinfo/clamav-users
>
>
> Help us build a comprehensive ClamAV guide:
> https://github.com/Cisco-Talos/clamav-documentation
>
> https://docs.clamav.net/#mailing-lists-and-chat

_______________________________________________

Manage your clamav-users mailing list subscription / unsubscribe:
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/Cisco-Talos/clamav-documentation

https://docs.clamav.net/#mailing-lists-and-chat
Re: clamdscan: show clean files? [ In reply to ]
> I prefer here on my system clamscan, this has much more additional
> parameters as clamdscan

clamscan is slow, as it has to load its database first.


> Any hints are appreciated …

If I read the code correctly, this is not possible with clamdscan alone.
However, this might work for you:

> find /tmp/files -type f -exec clamdscan --no-summary {} +
Re: clamdscan: show clean files? [ In reply to ]
On Mon, 13 Mar 2023, Schulze, Andreas via clamav-users wrote:

> Hello,
>
> we like to scan directories an gather verbose reports. These must include information about the scan result for each file.
> Using clamdscan, this does not happen: clamdscan inform only on infected files.
>
> # clamdscan --version
> ClamAV 1.0.1
>
> # ls -l /tmp/files/
> total 8
> -rw-r--r-- 1 root root 27 M?r 13 08:31 clean.txt
> -rw-r--r-- 1 root root 69 M?r 13 08:32 EICAR.COM
>
> # clamdscan --no-summary /tmp/files/
> /tmp/files/EICAR.COM: Eicar-Signature FOUND
>
> Using clamscan, also clean files are listed:
>
> # clamscan --no-summary /tmp/files/
> /tmp/files/EICAR.COM: Eicar-Signature FOUND
> /tmp/files/clean.txt: OK
>
> And this is exactly what we like to see using clamdscan.
> Any hints are appreciated ...
>
> Thanks
> Andreas
>
> - Intern -

clamdscan --verbose

--
Andrew C. Aitchison Kendal, UK
andrew@aitchison.me.uk
_______________________________________________

Manage your clamav-users mailing list subscription / unsubscribe:
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/Cisco-Talos/clamav-documentation

https://docs.clamav.net/#mailing-lists-and-chat
Re: clamdscan: show clean files? [ In reply to ]
Hello,

> However, this might work for you:
>
>> find /tmp/files -type f -exec clamdscan --no-summary {} +

Faster with parallel command :

find /tmp/files -type f |parallel clamdscan --no-summary {}


--
Cordialement / Best regards,

Arnaud Jacques
Gérant de SecuriteInfo.com

Téléphone : +33-(0)3.60.47.09.81
E-mail : aj@securiteinfo.com
Site web : https://www.securiteinfo.com
Facebook : https://www.facebook.com/pages/SecuriteInfocom/132872523492286
Twitter : @SecuriteInfoCom
Writing signatures for ClamAV antivirus since 2006
_______________________________________________

Manage your clamav-users mailing list subscription / unsubscribe:
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/Cisco-Talos/clamav-documentation

https://docs.clamav.net/#mailing-lists-and-chat
Re: clamdscan: show clean files? [ In reply to ]
> Faster with parallel command :
>
> find /tmp/files -type f |parallel clamdscan --no-summary {}

Cannot confirm:

> bench@sigil:/$ time find /usr/share/doc/texinfo -type f | parallel
> clamdscan --fdpass --no-summary {} | tail -n 2
> /usr/share/doc/texinfo/AUTHORS: OK
> /usr/share/doc/texinfo/NEWS.Debian.gz: OK
>
> real    0m4,241s
> user    0m3,101s
> sys 0m3,324s
> bench@sigil:/$ time find /usr/share/doc/texinfo -type f -exec
> clamdscan --fdpass --no-summary {} + | tail -n 2
> /usr/share/doc/texinfo/AUTHORS: OK
> /usr/share/doc/texinfo/NEWS.Debian.gz: OK
>
> real    0m0,299s
> user    0m0,015s
> sys 0m0,033s
> bench@sigil:/$ time find /usr/share/doc/texinfo -type f | parallel
> clamdscan --fdpass --no-summary {} | tail -n 2
> /usr/share/doc/texinfo/AUTHORS: OK
> /usr/share/doc/texinfo/NEWS.Debian.gz: OK
>
> real    0m4,273s
> user    0m3,222s
> sys 0m3,513s
> bench@sigil:/$ time find /usr/share/doc/texinfo -type f -exec
> clamdscan --fdpass --no-summary {} + | tail -n 2
> /usr/share/doc/texinfo/AUTHORS: OK
> /usr/share/doc/texinfo/NEWS.Debian.gz: OK
>
> real    0m0,343s
> user    0m0,004s
> sys 0m0,047s
Re: [EXTERNAL] clamdscan: show clean files? (SEMI-SOLVED) [ In reply to ]
Hello @all

Thanks for the discussion so far. Based on the results we can use find + xargs to get a result similar to our expectation.
Would be nice if clamdscan would do that out of the box some day.

# find /tmp/files/ -type f -print0 | xargs --null --no-run-if-empty clamdscan --no-summary --multiscan
/tmp/files/clean.md: OK
/tmp/files/EICAR.COM: Eicar-Signature FOUND
/tmp/files/clean.txt: OK
Andreas


- Intern -

________________________________
Datenschutz
Informationen zum Umgang mit Ihren personenbezogenen Daten bei DATEV finden Sie unter https://www.datev.de/dsgvo-information
________________________________
DATEV eG
90329 N?rnberg
Telefon: +49 911 319-0

E-Mail: info@datev.de
Internet: https://www.datev.de
Sitz: 90429 N?rnberg, Paumgartnerstra?e 6 - 14
Registergericht N?rnberg, GenReg Nr. 70

Vorstand
Prof. Dr. Robert Mayr (Vorsitzender)
Prof. Dr. Peter Krug (stellv. Vorsitzender)
Julia Bangerth
Prof. Dr. Christian B?r
Diana Windmei?er

Vorsitzender des Aufsichtsrates: Nicolas Hofmann
Re: clamdscan: show clean files? [ In reply to ]
Le 13/03/2023 à 15:39, Damian via clamav-users a écrit :
>> Faster with parallel command :
>>
>> find /tmp/files -type f |parallel clamdscan --no-summary {}
>
> Cannot confirm:
>
>> bench@sigil:/$ time find /usr/share/doc/texinfo -type f | parallel
>> clamdscan --fdpass --no-summary {} | tail -n 2
>> /usr/share/doc/texinfo/AUTHORS: OK
>> /usr/share/doc/texinfo/NEWS.Debian.gz: OK
>>
>> real    0m4,241s
>> user    0m3,101s
>> sys 0m3,324s
>> bench@sigil:/$ time find /usr/share/doc/texinfo -type f -exec
>> clamdscan --fdpass --no-summary {} + | tail -n 2
>> /usr/share/doc/texinfo/AUTHORS: OK
>> /usr/share/doc/texinfo/NEWS.Debian.gz: OK
>>
>> real    0m0,299s
>> user    0m0,015s
>> sys 0m0,033s
>> bench@sigil:/$ time find /usr/share/doc/texinfo -type f | parallel
>> clamdscan --fdpass --no-summary {} | tail -n 2
>> /usr/share/doc/texinfo/AUTHORS: OK
>> /usr/share/doc/texinfo/NEWS.Debian.gz: OK
>>
>> real    0m4,273s
>> user    0m3,222s
>> sys 0m3,513s
>> bench@sigil:/$ time find /usr/share/doc/texinfo -type f -exec
>> clamdscan --fdpass --no-summary {} + | tail -n 2
>> /usr/share/doc/texinfo/AUTHORS: OK
>> /usr/share/doc/texinfo/NEWS.Debian.gz: OK
>>
>> real    0m0,343s
>> user    0m0,004s
>> sys 0m0,047s


Disk cache hits.


--
Cordialement / Best regards,

Arnaud Jacques
Gérant de SecuriteInfo.com

Téléphone : +33-(0)3.60.47.09.81
E-mail : aj@securiteinfo.com
Site web : https://www.securiteinfo.com
Facebook : https://www.facebook.com/pages/SecuriteInfocom/132872523492286
Twitter : @SecuriteInfoCom
Writing signatures for ClamAV antivirus since 2006
_______________________________________________

Manage your clamav-users mailing list subscription / unsubscribe:
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/Cisco-Talos/clamav-documentation

https://docs.clamav.net/#mailing-lists-and-chat
Re: clamdscan: show clean files? [ In reply to ]
> Le 13/03/2023 à 15:39, Damian via clamav-users a écrit :
>>> Faster with parallel command :
>>>
>>> find /tmp/files -type f |parallel clamdscan --no-summary {}
>>
>> Cannot confirm:
>>
>>> bench@sigil:/$ time find /usr/share/doc/texinfo -type f | parallel
>>> clamdscan --fdpass --no-summary {} | tail -n 2
>>> /usr/share/doc/texinfo/AUTHORS: OK
>>> /usr/share/doc/texinfo/NEWS.Debian.gz: OK
>>>
>>> real    0m4,241s
>>> user    0m3,101s
>>> sys 0m3,324s
>>> bench@sigil:/$ time find /usr/share/doc/texinfo -type f -exec
>>> clamdscan --fdpass --no-summary {} + | tail -n 2
>>> /usr/share/doc/texinfo/AUTHORS: OK
>>> /usr/share/doc/texinfo/NEWS.Debian.gz: OK
>>>
>>> real    0m0,299s
>>> user    0m0,015s
>>> sys 0m0,033s
>>> bench@sigil:/$ time find /usr/share/doc/texinfo -type f | parallel
>>> clamdscan --fdpass --no-summary {} | tail -n 2
>>> /usr/share/doc/texinfo/AUTHORS: OK
>>> /usr/share/doc/texinfo/NEWS.Debian.gz: OK
>>>
>>> real    0m4,273s
>>> user    0m3,222s
>>> sys 0m3,513s
>>> bench@sigil:/$ time find /usr/share/doc/texinfo -type f -exec
>>> clamdscan --fdpass --no-summary {} + | tail -n 2
>>> /usr/share/doc/texinfo/AUTHORS: OK
>>> /usr/share/doc/texinfo/NEWS.Debian.gz: OK
>>>
>>> real    0m0,343s
>>> user    0m0,004s
>>> sys 0m0,047s
>
>
> Disk cache hits.

No, that's why I interleaved two runs each.
_______________________________________________

Manage your clamav-users mailing list subscription / unsubscribe:
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/Cisco-Talos/clamav-documentation

https://docs.clamav.net/#mailing-lists-and-chat