Hypertext Transfer Protocol (HTTP) is the standard communication protocol in the client-server computer model. In HTTP mode, Kaspersky Scan Engine operates as a REST-like service that receives HTTP requests in JSON or plain text format from client applications. The service scans objects passed in these requests, and sends back HTTP responses with scan results in JSON or plain text format.
In addition, a sample HTTP client source code is shipped in the distribution package. This sample HTTP client demonstrates how to make requests to Kaspersky Scan Engine in HTTP mode. You can also use the compiled sample to scan files from the command line.
Connection types
Kaspersky Scan Engine supports two connection types:
For Linux systems only.
Scanning capabilities
Kaspersky Scan Engine supports the following scan modes:
scanfileIn this mode, the sample HTTP client passes file paths to Kaspersky Scan Engine, which reads the files and scans them.
scanmemoryIn this mode, the sample HTTP client passes file contents to Kaspersky Scan Engine, which scans the contents.
checkurlIn this mode, the sample HTTP client passes URLs to Kaspersky Scan Engine, which checks them for malicious and phishing addresses.
For more information, see section "Making requests in HTTP mode".
Keep-Alive connections
By default, Kaspersky Scan Engine supports Keep-Alive connections, so it can process multiple objects one after another, by using the same connection.
To open a Keep-Alive connection, an HTTP client has to add the following header to the request:
Connection: Keep-Alive |
To close the connection, an HTTP client has to add the following header to the request:
Connection: close |