Clam daemon

clamd is a multi-threaded daemon that uses libclamav to scan files against viruses. It may work in one of the two network modes, listening on a:

• Unix (local) socket
• TCP socket

The daemon is fully configurable via the clamd.conf file ⁵. clamd recognizes the following commands:

• PING
  Check daemon state (should reply with "PONG").
• VERSION
  Print program and database versions.
• RELOAD
  Reload databases.
• SHUTDOWN
  Perform a clean exit.
• SCAN file/directory Scan file or directory (recursively) with archive support enabled (a full path is required).
• RAWSCAN file/directory Scan file or directory (recursively) with archive support disabled (a full path is required).
• CONTSCAN file/directory Scan file or directory (recursively) with archive support enabled and do not stop scanning if virus is found.
• STREAM Scan stream: clamd will return a new port number you should connect to and send data to scan.
• SESSION, END Start/end a clamd session - you can do multiple commands per TCP session (WARNING: due to the clamd implementation the RELOAD command will break the session).

and reacts to the special signals:

• SIGTERM - perform a clean exit
• SIGHUP - reopen a log file
• SIGUSR2 - reload the database