You may be correct, though recalling my command-line options, including verbose mode, the mbox file is very large, yet the scan took just a few seconds. There is no indication that the mbox file is being properly scanned, and knowing the base64 attachments that appear via xxd and grep, I have strong doubts the file is being properly checked.
Can anyone with 0.97.7 and a 3 GB mbox file with a known virus, please verify, and validate, if clamscan -v -d /tmp/virusdat /path/to/disc/with/files/ yields a hit, along with how long the scan took in minutes and seconds, and, if all works well, exactly what your command line string was for the scan? My mbox file happens to be on a read-only DVD, and must be scanned on it before the file touches read/write storage. Thanks. Scott On Wed, Apr 10, 2013 at 5:41 PM, Steven Morgan <smor...@sourcefire.com>wrote: > Scott, > > Looking at the code, I think the option is 'scan-mail'. It defaults as yes, > so you shouldn't need to do anything special, just clamscan /path/to/mbox/. > > Let us know if that is not working. > > Steve > > On Wed, Apr 10, 2013 at 4:46 PM, Scott Ehrlich <sc...@ehrlichtronics.com > >wrote: > > > I just compiled clamav 0.97.7 on SANS SIFT Linux. > > > > Reviewing the README file and google, it appears that clamscan should be > > able to review/scan mbox files, but any attempt at using --mbox, such as > > clamscan --mbox or clamscan -d /tmp/virdir --mbox /path/to/mboxfile, > > reports an error with the --mbox switch. > > > > I reviewed the configuration file, and there was nothing for mbox > support. > > > > Am I missing something? > > > > Thanks. > > > > Scott > > _______________________________________________ > > Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net > > http://www.clamav.net/support/ml > > > _______________________________________________ > Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net > http://www.clamav.net/support/ml > _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
