<html><head></head><body><div style="font-family: Verdana;font-size: 12.0px;"><div>The first things that comes to mind when using Suricata and ClamAV together is to do file extraction via Suricata and scan those file with ClamAV. I haven't done this myself with Suricata but creating a script to monitor the folder that Suricata places the files in and have ClamAV scan those files as they arrive shouldn't be too difficult.
<div>
<div name="quote" style="margin:10px 5px 5px 10px; padding: 10px 0 10px 10px; border-left:2px solid #C3D9E5; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;">
<div style="margin:0 0 10px 0;"><b>Sent:</b> Monday, July 03, 2017 at 9:48 AM<br/>
<b>From:</b> "Srinivasreddy R" <srinivasreddy4390@gmail.com><br/>
<b>To:</b> oisf-users@lists.openinfosecfoundation.org<br/>
<b>Subject:</b> [Oisf-users] suricata and ClamAV</div>
<div name="quoted-content">
<div>
<div>
<div>Hi All,</div>
I am new to suricata .I have a question related to usage of ClamAv with suricata.<br/>
Is there any need/purpose to use ClamAV with suricata ?<br/>
</div>
<div>What are the possible use cases to use ClamAV along with suricata .?</div>
<div> </div>
<div>thanks</div>
<div>srinivas</div>
</div>
_______________________________________________ Suricata IDS Users mailing list: oisf-users@openinfosecfoundation.org Site: <a href="http://suricata-ids.org" target="_blank">http://suricata-ids.org</a> | Support: <a href="http://suricata-ids.org/support/" target="_blank">http://suricata-ids.org/support/</a> List: <a href="https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users" target="_blank">https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users</a></div>
</div>
</div>
</div></div></body></html>