Mailing List Archive

Hi there,

On Tue, 24 Sep 2019, Wreschnig, Alexander Scott via clamav-users wrote:

> I was hoping someone might have some advice on debugging an
> IDSESSION command when streaming content to the clamav daemon. I'm
> trying to understand why small files (<=1 mb) are being processed
> appropriately but when I scale the file up to 2 mb or so, it just
> spins until it times out. There's nothing in the logs, and when I
> check clamdTOP it doesn't look like anything's actually made it to
> the daemon. Is there a better place to look for debugging
> information?

I've never used IDSESSION, as (from reading the documentation) the API
seems to be a little bit fussy. Using INSTREAM, and sending the data
in 65k chunks over TCP, I've never seen clamd behave as you describe.
I haven't experimented with larger chunks.

Which version of ClamAV are you using? Packaged or built from source?

How are you sending the data?

Have you set the 'Debug' and 'LogVerbose' options in clamd.conf?

Perhaps you could post your clamd.conf for us to see.

--

73,
Ged.

_______________________________________________

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml