sigtool(1) [suse man page]

sigtool(1)							  Clam AntiVirus							sigtool(1)

NAME

       sigtool - signature and database management tool

SYNOPSIS

       sigtool [options]

DESCRIPTION

       sigtool can be used to generate MD5 checksums, convert data into hexadecimal format, list virus signatures and build/unpack/test/verify CVD
       databases and update scripts.

OPTIONS

       -h, --help
	      Output help information and exit.

       -V, --version
	      Print version number and exit.

       --quiet
	      Be quiet - output only error messages.

       --stdout
	      Write all messages to stdout.

       --hex-dump
	      Read data from stdin and write hex string to stdout.

       --md5 [FILES]
	      Generate MD5 checksum from stdin or MD5 sigs for FILES.

       --mdb [FILES]
	      Generate .mdb signatures for FILES.

       --html-normalise=FILE
	      Create normalised HTML files comment.html, nocomment.html, and script.html in current working directory.

       --utf16-decode=FILE
	      Decode UTF16 encoded data.

       --vba=FILE
	      Extract VBA/Word6 macros from given MS Office document.

       --vba-hex=FILE
	      Extract Word6 macros from given MS Office document and display the corresponding hex values.

       -i, --info
	      Print a CVD information and verify MD5 and a digital signature.

       -b, --build
	      Build a CVD file. -s, --server is required.

       --server
	      ClamAV Signing Service address (for virus database maintainers only).

       --unpack FILE, -u FILE
	      Unpack FILE (CVD) to a current directory.

       --unpack-current
	      Unpack a local CVD file (main or daily) to current directory.

       --diff=OLD NEW, -d OLD NEW
	      Create a diff file for OLD and NEW CVDs/INCDIRs.

       --run-cdiff=FILE, -r FILE
	      Execute update script FILE in current directory.

       --verify-cdiff=FILE, -r FILE
	      Verify DIFF against CVD/INCDIR.

       -l[FILE], --list-sigs[=FILE]
	      List all signature names from the local database directory (default) or from FILE.

       -fREGEX, --find-sigs=REGEX
	      Find and display signatures from the local database directory which match the given REGEX.  The  whole  signature  body  (name,  hex
	      string, etc.) is checked.

       -fREGEX, --decode-sigs=REGEX
	      Decode signatures read from the standard input (eg. piped from --find-sigs)

       -fREGEX, --test-sigs=DATABASE TARGET_FILE
	      Test all signatures from DATABASE against TARGET_FILE.

EXAMPLES

       Generate hex string from testfile and save it to testfile.hex:

	      cat testfile | sigtool --hex-dump > testfile.hex

CREDITS

       Please check the full documentation for credits.

AUTHOR

       Tomasz Kojm <tkojm@clamav.net>

SEE ALSO

       freshclam(1), freshclam.conf(5)

ClamAV 0.96.1							 February 12, 2007							sigtool(1)

Clamd client(1) 						  Clam AntiVirus						   Clamd client(1)

NAME

       clamdscan - scan files and directories for viruses using Clam AntiVirus Daemon

SYNOPSIS

       clamdscan [options] [file/directory]

DESCRIPTION

       clamdscan  is  a  clamd	client which may be used as a clamscan replacement. It accepts all the options implemented in clamscan but most of
       them will be ignored because its scanning abilities only depend on clamd.

OPTIONS

       -h, --help
	      Display help information and exit.

       -V, --version
	      Print version number and exit.

       -v, --verbose
	      Be verbose.

       --quiet
	      Be quiet - only output error messages.

       --stdout
	      Write all messages (except for libclamav output) to the standard output (stdout).

       --config-file=FILE
	      Read clamd settings from FILE.

       -l FILE, --log=FILE
	      Save the scan report to FILE.

       -f FILE, --file-list=FILE
	      Scan files listed line by line in FILE.

       -m, --multiscan
	      In the multiscan mode clamd will attempt to scan the directory contents in parallel using available threads. This  option  is  espe-
	      cially  useful  on  multiprocessor and multi-core systems. If you pass more than one file or directory in the command line, they are
	      put in a queue and sent to clamd individually. This means, that single files are always  scanned	by  a  single  thread.	Similarly,
	      clamdscan will wait for clamd to finish a directory scan (performed in multiscan mode) before sending request to scan another direc-
	      tory. This option can be combined with --fdpass (see below).

       -z, --allmatch
	      After a match, continue scanning within the file for additional matches.

       --remove
	      Remove infected files. Be careful.

       --move=DIRECTORY
	      Move infected files into DIRECTORY.

       --no-summary
	      Do not display summary at the end of scanning.

       --reload
	      Request clamd to reload virus database.

       --fdpass
	      Pass the file descriptor permissions to clamd. This is useful if clamd is running as a different user as it is faster than streaming
	      the file to clamd.  Only available if connected to clamd via local(unix) socket.

       --stream
	      Forces  file  streaming  to  clamd.  This  is generally not needed as clamdscan detects automatically if streaming is required. This
	      option only exists for debugging and testing purposes, in all other cases --fdpass is preferred.

EXAMPLES

       (0) To scan a one file:

	      clamdscan file

       (1) To scan a current working directory:

	      clamdscan

       (2) To scan all files in /home:

	      clamdscan /home

       (3) To scan a file when clamd is running as a different user:

	      clamdscan --fdpass ~/downloads

       (4) To scan from standard input:

	      clamdscan - < file_to_scan

	      cat file_to_scan | clamdscan -

RETURN CODES

       0 : No virus found.

       1 : Virus(es) found.

       2 : An error occured.

CREDITS

       Please check the full documentation for credits.

AUTHOR

       Tomasz Kojm <tkojm@clamav.net>

SEE ALSO

       clamd(8), clamd.conf(5), clamscan(1)

ClamAV 0.98.4							 February 12, 2009						   Clamd client(1)