Upgrade to clamav 0.90.2 makes scanning extremely slow

[Paul Hutchings]

Newbie talking so feel free to shoot me down in flames :-)

My understanding (from clamscan --debug) is that each time you run clamscan it appears it has to read the virus patterns, unpack them (to /tmp), scan the files, remove the files.

This is the "probably talking out my bum" bit, but that sounds less efficient than clamd where (I assume) the daemon loads the definitions once and each child process doesn't have to do this?

Cheers,
Paul

Paul Hutchings
Network Administrator, MIRA Ltd.
Tel: 44 (0)24 7635 5378
Fax: 44 (0)24 7635 8378
mailto:paul.hutchings at mira.co.uk

-----Original Message-----
From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Scott Silva
Sent: 24 April 2007 17:09
To: mailscanner at lists.mailscanner.info
Subject: Re: Upgrade to clamav 0.90.2 makes scanning extremely slow

Julian Field spake the following on 4/24/2007 8:52 AM:
> 
> 
> Kapetanakis Giannis wrote:
>> On Mon, 23 Apr 2007, Martin wrote:
> 
>>> Arto wrote:
>>>
>>>> We had this too. Uninstalling clamav* and installing it again helped.
>>>>
>>>> -arto
>>>>
>>> Thanks for all replies. Read about this issue on the clamav-list and 
>>> hopefully it will be fixed in the next version.
>> I have similar problems with clamav myself.
> 
>> What I did that improved a little bit
>> was deleting the virus database in /var/lib/clamav/*
>> and running freshclam again.
> 
>> Still is very slow. If you try clamscan -debug you will
>> find out why it is so damn slow....
> 
>> Clamd works fast on the other hand.
>> Maybe it should be included officialy (clamdscan)
>> in MailScanner's the next version.
> Why? I already support the "clamavmodule" which is faster than clamd anyway.
> 
> Jules
> 
Are there any tips on commandline diagnostics for the clamavmodule?
I have a system that has been choking with the module for 2 weeks, and the
mailscanner.conf fix isn't working with it.
I am running clamav now, but the load is much higher.

I am going to try the tip of clearing the definitions and re-running freshclam
to see if that helps.
-- 

MailScanner is like deodorant...
You hope everybody uses it, and
you notice quickly if they don't!!!!

-- 
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner

Before posting, read http://wiki.mailscanner.info/posting

Support MailScanner development - buy the book off the website! 

-- 
MIRA Ltd.

Watling Street, Nuneaton, Warwickshire, CV10 0TU, England.

Registered in England No. 402570
VAT Registration  GB 114 5409 96

The contents of this e-mail are confidential and are solely for the use of the intended recipient.
If you receive this e-mail in error, please delete it and notify us either by e-mail, telephone or fax.
You should not copy, forward or otherwise disclose the content of the e-mail as this is prohibited.