TIP: Click on subject to list as thread! ANSI
echo: mbse
to: Johannes Beekhuizen
from: Robert Wolfe
date: 2008-02-20 21:35:16
subject: Re: Some remarks about running clamd

> I have set up mbse to use clamd as streaming virus scanner now.
 > You claim that it is much faster. But I find 52 seconds for a 53M
 > file (the documentation set) not extremely fast. In fact, when I
 > run fpscan or clamscan on it separately, that takes about 20 secs.
 > I'm also wondering why an "Execute: /usr/bin/rm -r -f arc5822" is
 > performed.
 > What's going on?
 > And yes: all other virus scanners are disabled.

 > === import ===
 >   20-Feb-2008 13:04:27 mbfile[5822]
 >   20-Feb-2008 13:04:27 mbfile[5822] MBFILE v0.95.2
 >   20-Feb-2008 13:04:27 mbfile[5822] Command line: mbfile im 54
 > + 20-Feb-2008 13:04:27 mbfile[5822] Execute: /usr/bin/rm -r -f arc5822
 > + 20-Feb-2008 13:04:27 mbfile[5822] Scanning
 > /tmp/lilypond-2.11.40-1.documentation.tar.bz2 with Clam AntiVirus stream
 > scanner
 > + 20-Feb-2008 13:05:19 mbfile[5822] Execute: /usr/bin/rm -r -f arc5822
 > + 20-Feb-2008 13:05:20 mbfile[5822] Scanning
 > /tmp/lilypond-2.11.40-1.linux-x86.sh with Clam AntiVirus stream scanner
 > + 20-Feb-2008 13:05:23 mbfile[5822] Execute: /usr/bin/rm -r -f arc5822
 > + 20-Feb-2008 13:05:23 mbfile[5822] Scanning /tmp/lilypond-2.11.40.tar.gz
with
 > Clam AntiVirus stream scanner
 > + 20-Feb-2008 13:05:32 mbfile[5822] Execute: /usr/bin/rm -r -f arc5822
 > + 20-Feb-2008 13:05:32 mbfile[5822] Import Files [    3] Imported [    3]
 > Errors [    0]
 >   20-Feb-2008 13:05:32 mbfile[5822] MBFILE finished in  1:05
 > === tropmi ===

Hans, it looks like it is removing the temporary arc5822 directory that the BBS
uses to temporarily extract the archive before extracting the file.  After
which it looks like the BBS then recreates the same directory, extracting the
contents of the new file to that directory, then running the scanner on each
file in that directory.
--- SBBSecho 2.11-Win32
* Origin: Omicron Theta * net261.ath.cx * Buffalo NY (1:261/20)
SEEN-BY: 10/1 3 14/250 300 90/1 120/228 123/500 134/10 140/1 226/0 236/150
SEEN-BY: 249/303 250/1 261/20 38 100 1404 1406 1418 266/1413 320/119 633/104
SEEN-BY: 633/260 267 285 712/848 800/432 801/161 189 2222/700 2320/100 200
SEEN-BY: 2905/0
@PATH: 261/20 38 633/260 267

SOURCE: echomail via fidonet.ozzmosis.com

Email questions or comments to sysop@ipingthereforeiam.com
All parts of this website painstakingly hand-crafted in the U.S.A.!
IPTIA BBS/MUD/Terminal/Game Server List, © 2025 IPTIA Consulting™.