<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Cambria;
panose-1:2 4 5 3 5 4 6 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.StileMessaggioDiPostaElettronica17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:70.85pt 2.0cm 2.0cm 2.0cm;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="IT" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal">Hi<br>
Esets wrapper uses esets_scan program that load libraries each time,<o:p></o:p></p>
<p class="MsoNormal">this sw is included in esets file security for linux package<o:p></o:p></p>
<p class="MsoNormal">this is the output that it is able to parse<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">[root@EFA42 /]# time /opt/eset/esets/sbin/esets_scan /eicar.txt<o:p></o:p></p>
<p class="MsoNormal">ESET Command-line scanner, version 4.5.13, (C) 1992-2018 ESET, spol. s r.o.<o:p></o:p></p>
<p class="MsoNormal">Using license: COMET - lfs (/etc/opt/eset/esets/license/esets_26911c.lic)<o:p></o:p></p>
<p class="MsoNormal">Module loader, version 1072 (20180813), build 1118<o:p></o:p></p>
<p class="MsoNormal">Module perseus, version 1546 (20181127), build 1996<o:p></o:p></p>
<p class="MsoNormal">Module scanner, version 18652 (20190104), build 39938<o:p></o:p></p>
<p class="MsoNormal">Module archiver, version 1281 (20181213), build 1365<o:p></o:p></p>
<p class="MsoNormal">Module advheur, version 1191 (20181106), build 1171<o:p></o:p></p>
<p class="MsoNormal">Module cleaner, version 1172 (20181113), build 1247<o:p></o:p></p>
<p class="MsoNormal">Command line: /eicar.txt<o:p></o:p></p>
<p class="MsoNormal">Scan started at: Tue 08 Jan 2019 08:40:25 AM CET<o:p></o:p></p>
<p class="MsoNormal">name="/eicar.txt", threat="Eicar test file", action="cleaned by deleting", info=""<o:p></o:p></p>
<p class="MsoNormal">Scan completed at: Tue 08 Jan 2019 08:40:25 AM CET<o:p></o:p></p>
<p class="MsoNormal">Scan time: 0 sec (0:00:00)<o:p></o:p></p>
<p class="MsoNormal">Total: files - 1, objects 1<o:p></o:p></p>
<p class="MsoNormal">Infected: files - 0, objects 0<o:p></o:p></p>
<p class="MsoNormal">Cleaned: files - 1, objects 1<o:p></o:p></p>
<p class="MsoNormal">real 0m4.184s<o:p></o:p></p>
<p class="MsoNormal">user 0m4.040s<o:p></o:p></p>
<p class="MsoNormal">sys 0m0.132s<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">As you can see it use more than 4 seconds of cpu each scan<o:p></o:p></p>
<p class="MsoNormal">Esets have same package licensed as mail security (about same price) and it use esets_cli that call preloaded daemon and take very few resources<o:p></o:p></p>
<p class="MsoNormal">[root@EFA42 /]# time /opt/eset/esets/bin/esets_cli /eicar.txt<o:p></o:p></p>
<p class="MsoNormal">/eicar.txt: action="rejected"<o:p></o:p></p>
<p class="MsoNormal">/eicar.txt: virus="Eicar test file"<o:p></o:p></p>
<p class="MsoNormal">real 0m0.011s<o:p></o:p></p>
<p class="MsoNormal">user 0m0.000s<o:p></o:p></p>
<p class="MsoNormal">sys 0m0.001s<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Is possible to write a wrapper and all interface for this ?<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Using esets_cli in conjunction with clamd we can have a powered double scan feature with very low cpu consumption<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-family:"Cambria",serif;color:#1F497D;mso-fareast-language:IT">Nicola Piazzi</span><span style="color:#1F497D;mso-fareast-language:IT"><br>
</span><span style="font-family:"Cambria",serif;color:#1F497D;mso-fareast-language:IT">CED - Sistemi<br>
COMET s.p.a.</span><span style="color:#1F497D;mso-fareast-language:IT"><br>
</span><span style="font-family:"Cambria",serif;color:#1F497D;mso-fareast-language:IT">Via Michelino, 105 - 40127 Bologna – Italia<br>
Tel. +39 051.6079.293</span><span style="color:#1F497D;mso-fareast-language:IT"><br>
</span><span style="font-family:"Cambria",serif;color:#1F497D;mso-fareast-language:IT">Cell. +39 328.21.73.470<br>
Web: </span><span style="color:#1F497D;mso-fareast-language:IT"><a href="http://www.comet.it/"><span style="color:blue">www.comet.it</span></a><br>
</span><span style="mso-fareast-language:IT"><img border="0" width="131" height="59" style="width:1.3645in;height:.6145in" id="Immagine_x0020_1" src="cid:image001.png@01D4A72D.73F91E60" alt="Nuova immagine bitmap"><o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</body>
</html>