sys4/savacli

Avira SAVAPI command line client

savacli

savacli is a command-line client for Avira's Anti-malware SDK (SAVAPI).

It interfaces with SAVAPI via TCP or UNIX domain socket and instructs SAVAPI to scan files and directories for malware. When SAVAPI has finished savacli reports the scan result.

savacli was developed by sys4 AG. sys4 AG and Avira are technology partners.

savacli is licensed GPLv3.

Usage

Download the sources.

Install future first if you are using Python2. You should use Python3 because Python2 has end of life on 2020-01-01.

Copy savacli.conf to /etc/savapi/savacli.conf and note the location of the logfile in savacli.conf.

Unless you run savacli as root create the logfile and set permissions to let the user, who runs savacli, write to the file.

savacli's Issues

get an exception, when ReportFormat is set to json

I use the savacli 0.4.1 on debian bullseye.
When I use the following configfile (I replaced the ProductID with XXXXX):

root@savapi:/# cat /etc/savacli.cfg 
[savacli]
ProductId = XXXXX
Socket = unix:/socket/savapi/savapi/socket
LogClasses = clean infected error
Local = yes
ReportFormat = json
ReportHeader = yes
ReportSummary = no
LogFile = /tmp/out.log

I get the following error:

root@savapi:/# /tmp/savacli --config /etc/savacli.cfg --input /etc/resolv.conf 
Traceback (most recent call last):
  File "/tmp/savacli", line 891, in <module>
    exit_code = main()
  File "/tmp/savacli", line 885, in main
    print(json.dumps(out))
  File "/usr/lib/python3.9/json/__init__.py", line 231, in dumps
    return _default_encoder.encode(obj)
  File "/usr/lib/python3.9/json/encoder.py", line 199, in encode
    chunks = self.iterencode(o, _one_shot=True)
  File "/usr/lib/python3.9/json/encoder.py", line 257, in iterencode
    return _iterencode(o, 0)
  File "/usr/lib/python3.9/json/encoder.py", line 179, in default
    raise TypeError(f'Object of type {o.__class__.__name__} '
TypeError: Object of type bytes is not JSON serializable

when I set ReportFormat to plain, the scan works fine:

root@savapi:/# /tmp/savacli --config /etc/savacli.cfg --input /etc/resolv.conf 
Global information:
-------------------
date: Fri, 10 Mar 2023 15:02:29 +0100
product version: 4.15.15.58
engine version: 8.3.66.52
VDF version: 8.19.36.74
VDF signature count: 5915454
license expire: 2024-03-01

it would be nice to get the output in json format, so we can use it in further steps

Feature Request: print all scanned files in output on stdout, when "clean" is listed LogClasses

It would be nice to get a list of all scanned files, when I set:

LogClasses = clean infected error

in the configfile.
I see all scanned files in the logfile, but the logfile is not parseable in my eyes.
So it would be nice to get all files listed in the report on stdout (can be configured to be in json format).