Re: [Snort-inline-users] snortinline-clamav crashes snort_inline

[Will M. <wil...@gm...>]

Looks like PE analysis code in clamav is causing it to blow up, we can add
some code to deal with this return value but I want to dig into it a bit
more before we decide to do so.

Regards,

Will

clamscan /tmp/snort_inline-clamav-UlHUSu
/tmp/snort_inline-clamav-UlHUSu: Input/Output error

----------- SCAN SUMMARY -----------
Known viruses: 108346
Engine version: 0.90.1
Scanned directories: 0
Scanned files: 1
Infected files: 0
Data scanned: 0.00 MB
Time: 14.471 sec (0 m 14 s)

clamscan --no-pe /tmp/snort_inline-clamav-UlHUSu
/tmp/snort_inline-clamav-UlHUSu: OK

----------- SCAN SUMMARY -----------
Known viruses: 108346
Engine version: 0.90.1
Scanned directories: 0
Scanned files: 1
Infected files: 0
Data scanned: 0.00 MB
Time: 14.276 sec (0 m 14 s)

Regards,

Will