[Avcheck] drweb (was: Removing of long options?)

[Geir Thomassen]

Michael Tokarev wrote:


 > I'm again somewhat unexpectedly busy (together
 > with "evaluating" drweb (btw, an excellent one!)),
 > and can't say when it all will be done... :(


I did play with drweb


* The heuristic analyzer kicks on "php-ldap-4.0.4pl1-9.i386.rpm"
from the Redhat 7.1 distro, flagging it as a possible virus (I
guess that is the downside to a heuristic scanner)

* I have seen it crash (hang) a few times, but I can't reproduce
it reliable. It seems to happen after scanning many files
(eg. /home), and then hitting a large archive (eg. linux-2.2.19.tar.gz)

* Parts of the documentation is only in russian !

I am very pleased with the scanner, and I belive that we should
integrate it into avscan asap.

I have not tried the drwebd dæmon, nor the postfix interface to the
scanner.


Have fun,
    Geir