Re: [mailinglists] Re: Honeypot and AntiVirus

["KeyFocus" <support () keyfocus net>]

>  Another person mentioned that it would probably be OK to disable the
real-time scanning feature of the AV to avoid having my packet logs cleaned
when I accessed them.

That person is right. AV tools hook into the OS to capture writting to disk
so there is probably no way around it, but to turn it off.