Performance and accuracy issues

[Michael Dahlberg]

Fanatastic piece of software...I can't imagine running a mail server
without it.  However, the latest upgrade (from 4.13-3 to 4.26.8) has
uncovered a few issues.

A little about our config: MailScanner (4.26.8) runs with Sophos
(3.78d) on a dual processor Sun 220R with 2GB RAM. The
MailScanner.conf file is set to start 10 child processes which will
scan a max of 30 messages.  MailScanner also runs in queue mode rather
than batch.  We do no spam analysis, just virus scanning.  I've also
installed the first Message.pm perl mod that Julian Fields released a
couple of days ago.

I've noticed that when running the SAVI engine (Virus Scanner =
sophossavi), rather than `sweep` (Virus Scanner = sophos) it
takes about 3x as long with the SAVI engine (approx. 3 min to scan 100
messages using SAVI versus 1 min with sweep).  Also when I use the
SAVI engine, more MyDoom-infected email messages are found and
removed.

Is this the experience of other readers of this list?  Does anyone
have an explanation or advice on which virus scanner (Sophos or SAVI)
to use?

Thanks,
Mike

######################
Michael Dahlberg
Systems Integrator
Bucknell University
######################