Mailing List Archive: ClamAV: users

virusdb updates

Index | Next | Previous | View Threaded

henri at nerv

Feb 11, 2012, 3:49 AM

Post #1 of 7 (440 views)
Permalink

virusdb updates

Do we really need information of not added submissions to clamav-virusdb mailing list? Does submitter even get the submission ID some way? These submissions IDs could be used in https://bugzilla.clamav.net/show_bug.cgi?id=4335

Submission-ID: 39151223
Sender: Anonymous
Submission notes: Same as in Submission-ID 21623480
Added: No

Is there a way to receive clamav-virusdb lists in one email per week/month?

- Henri Salo
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

cswiger at mac

Feb 11, 2012, 8:23 AM

Post #2 of 7 (419 views)
Permalink

Re: virusdb updates [In reply to]

On Feb 11, 2012, at 3:49 AM, Henri Salo wrote:
> Is there a way to receive clamav-virusdb lists in one email per week/month?

Enable the "digest mode" in your Mailman preferences, see:

http://lists.clamav.net/mailman/listinfo/clamav-virusdb

Digests are normally sent daily, or more often if needed to keep the digest message from being "huge", but that should be tunable by the list admin. I'm not sure whether it would be reasonable to receive virusdb messages monthly, since they would be rather dated by then, but the Mailman page also links to the list archives, which you might use instead of receiving mail from the list.

Regards,
--
-Chuck

_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

henri at nerv

Feb 11, 2012, 8:44 AM

Post #3 of 7 (419 views)
Permalink

Re: virusdb updates [In reply to]

On Sat, Feb 11, 2012 at 08:23:33AM -0800, Chuck Swiger wrote:
> On Feb 11, 2012, at 3:49 AM, Henri Salo wrote:
> > Is there a way to receive clamav-virusdb lists in one email per week/month?
>
> Enable the "digest mode" in your Mailman preferences, see:
>
> http://lists.clamav.net/mailman/listinfo/clamav-virusdb
>
> Digests are normally sent daily, or more often if needed to keep the digest message from being "huge", but that should be tunable by the list admin. I'm not sure whether it would be reasonable to receive virusdb messages monthly, since they would be rather dated by then, but the Mailman page also links to the list archives, which you might use instead of receiving mail from the list.

Thanks for the tip. I didn't note that feature for this kind of use. My question is still open: "Do we really need information of not added submissions to clamav-virusdb mailing list?"

- Henri Salo
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

henri at nerv

Feb 11, 2012, 8:58 AM

Post #4 of 7 (420 views)
Permalink

Re: virusdb updates [In reply to]

On Sat, Feb 11, 2012 at 01:49:29PM +0200, Henri Salo wrote:
> Do we really need information of not added submissions to clamav-virusdb mailing list? Does submitter even get the submission ID some way? These submissions IDs could be used in https://bugzilla.clamav.net/show_bug.cgi?id=4335
>
> Submission-ID: 39151223
> Sender: Anonymous
> Submission notes: Same as in Submission-ID 21623480
> Added: No
>
> Is there a way to receive clamav-virusdb lists in one email per week/month?

While configuring mailing list options I receive error-message:

The list administrator has disabled digest delivery for this list, so your delivery option has not been set. However your other options have been set successfully.

- Henri Salo
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

gcirino at cirelle

Feb 11, 2012, 5:52 PM

Post #5 of 7 (413 views)
Permalink

Re: virusdb updates [In reply to]

| Do we really need information of not added submissions to clamav-virusdb
| mailing list? Does submitter even get the submission ID some way? These
| submissions IDs could be used in
| https://bugzilla.clamav.net/show_bug.cgi?id=4335
|
| Submission-ID: 39151223
| Sender: Anonymous
| Submission notes: Same as in Submission-ID 21623480
| Added: No
|

I'm not sure there is much value to the virusdb updates, as I usually
delete them, except to see if my submission made it.

I've tried to figure out what is being caught, and there is always some
esoteric name that rarely coincides with commonly held virus names.

Not sure if it's a patent on the name thing or what.

Best Regards
Greg

_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

alvarnell at mac

Feb 12, 2012, 1:22 AM

Post #6 of 7 (412 views)
Permalink

Re: virusdb updates [In reply to]

On 2/11/12 5:52 PM, "Greg Cirino" <gcirino [at] cirelle> wrote:

> I'm not sure there is much value to the virusdb updates, as I usually
> delete them, except to see if my submission made it.
>
> I've tried to figure out what is being caught, and there is always some
> esoteric name that rarely coincides with commonly held virus names.
>
> Not sure if it's a patent on the name thing or what.
>
I find this to be an industry-wide problem not necessarily unique to clamav.
Part of it is the overlap between malware classifications. Some of it is
probably in the interest of getting definitions out-the-door without a lot
of research. It drives end-users crazy when they get an infection name that
is totally unique to clamav and there is no information about what it is,
what it does and how to get rid of any extended infection.

-Al-

--
Al Varnell
Mountain View, CA

_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

jesler at sourcefire

Feb 15, 2012, 4:52 PM

Post #7 of 7 (393 views)
Permalink

Re: virusdb updates [In reply to]

We've been tossing this back and forth here at the office and we think we
may have a solution. Let us keep bouncing it around some more and we'll
get something out to you soon.

On Sun, Feb 12, 2012 at 4:22 AM, Al Varnell <alvarnell [at] mac> wrote:

> On 2/11/12 5:52 PM, "Greg Cirino" <gcirino [at] cirelle> wrote:
>
> > I'm not sure there is much value to the virusdb updates, as I usually
> > delete them, except to see if my submission made it.
> >
> > I've tried to figure out what is being caught, and there is always some
> > esoteric name that rarely coincides with commonly held virus names.
> >
> > Not sure if it's a patent on the name thing or what.
> >
> I find this to be an industry-wide problem not necessarily unique to
> clamav.
> Part of it is the overlap between malware classifications. Some of it is
> probably in the interest of getting definitions out-the-door without a lot
> of research. It drives end-users crazy when they get an infection name that
> is totally unique to clamav and there is no information about what it is,
> what it does and how to get rid of any extended infection.
>
>
> -Al-
>
> --
> Al Varnell
> Mountain View, CA
>
>
>
> _______________________________________________
> Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
> http://www.clamav.net/support/ml
>

--
Joel Esler
Senior Research Engineer, VRT
OpenSource Community Manager
Sourcefire
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Index | Next | Previous | View Threaded

Interested in having your list archived? Contact Gossamer Threads