[Sorry for all the spam]
As a test, I ran this:
while true ; do strace -t -s100 clamdscan /tmp/eicar-test >>
/root/clamdscan-strace 2>&1; sleep 2; done
And here is the interesting output:
11:53:34 socket(PF_FILE, SOCK_STREAM, 0) = 3
11:53:34 connect(3, {sa_family=AF_FILE,
path="/var/spool/MIMEDefang/clamd.sock"...}, 110) = 0
11:53:34 send(3, "zCONTSCAN /tmp/eicar-test\0"..., 26, 0) = 26
11:53:34 recv(3, "/tmp/eicar-test:
Eicar-Test-Signature(8fd1f39c7e4cf58dfa8c0618364779c2:70) FOUND\0"..., 5120, 0)
= 81
11:53:36 socket(PF_FILE, SOCK_STREAM, 0) = 3
11:53:36 connect(3, {sa_family=AF_FILE,
path="/var/spool/MIMEDefang/clamd.sock"...}, 110) = 0
11:53:36 send(3, "zCONTSCAN /tmp/eicar-test\0"..., 26, 0) = 26
11:53:36 recv(3, "/tmp/eicar-test: Eicar-Test-Signature FOUND\0"..., 5120, 0) =
44
I did not restart clamd or touch it in any way.
Regards,
David.
_______________________________________________
http://lurker.clamav.net/list/clamav-devel.html
Please submit your patches to our Bugzilla: http://bugs.clamav.net
