Snort mailing list archives

snort_inline-2.6.1.5 and ClamAV


From: "Ilo Lorusso" <sneak147 () gmail com>
Date: Thu, 18 Sep 2008 15:36:14 +0200

 Hi,

im using snort_inline 2.6.1.5 with clamav-0.92

the command I use to start the ClamAV preprocess is


preprocessor clamav: ports 20 21 80, toclientonly, dbdir /var/clamav

and I can see it initialises properly

but when I do a test by downloading the eicar test virus I get the following
error , Any Ideas ?? on what the problem could be?

does the clamAV deamon needto be running?

09/18-15:22:22.869223  [**] [132:2:1] (spp_clamav) Scanning Failed: (-123)
Input/Output error [**] {TCP} 172.20.128.92:80 -> 172.20.181.12:1456


Thanks Regards Ilo Lorusso.
-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

Current thread: