scannedonlyd_clamav(8) - Linux man page

Name

vfs module

Synopsis

scannedonlyd_clamav

scannedonlyd_clamav --pidfile pidfile

-

-

scanroot /srv/data --portnum 2020 --maxthreads 8

Description

The scannedonlyd_clamav is a daemon that uses ClamAV to scan files that are requested by the scannedonly samba vfs module.

The daemon listens on a unix domain socket or an UDP socket for datagrams with a filename. Each requested file, if located within scanroot will be scanned. If clean, a second file is added with prefix .scanned: and this will tell the scannedonly samba vfs module that the file has been scanned and is clean.

To maintain quick responses for the majority of the requests, only a single thread will be used for large files. All other threads will scan only small files.

If a new clamAV database is available (for example loaded with freshclam), it will be loaded by one of the threads. All other threads will continue to use the old database until the new database is loaded. Memory consumption of the daemon may double. When loaded, all other threads will switch to the new database and memory consumption will go down to normal.

Options

-p --portnum

the UDP port to listen on

-s path --socket=path

the unix domain socket to listen on

-t 4 --maxthreads=4

the number of threads for virus scanning

-l --loglevel

loglevel from 0 (little logging) to 3 (max logging)

-b 10 --big=10

file size in megabytes for files considered to be large files. Default is 10.

-m 20 --time=20

the number of minutes between status messages in the logs

-r path --scanroot=path

the location of the files to scan. requests for files outside the scanroot are ignored

-q 1000 --queuelen=1000

the maximum number of requests to queue. Any requests arriving after the queue has hit this limit are ignored and have to be requested again. The default length is 1000.

-i path --pidfile=path

the location of a pidfile

Copyright

Copyright © 2007,2008 Olivier Sessink