clamav-users March 2008 archive
Main Archive Page > Month Archives  > clamav-users archives
clamav-users: Re: [Clamav-users] Memory usage for clamd is huge

Re: [Clamav-users] Memory usage for clamd is huge

From: <kwijibo_at_nospam>
Date: Mon Mar 31 2008 - 21:03:27 GMT
To: ClamAV users ML <clamav-users@lists.clamav.net>


Dennis Peterson wrote:

> How are able to determine that? There's nothing in the connection
> information or in the message that identifies the source OS, hardware,
> or MTA. Everything in a message can be spoofed as can the sending
> system. The only thing you can be sure of is the IP you log during the
> connection. Nothing else can be considered real.

P0f maybe? Although with my experience it has never been that accurate and is easy to fool if one so desires.



Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html