Clamav Anti-virus speed (using clammodule)

Matt Kettler mkettler at evi-inc.com
Mon Jan 15 22:14:08 CET 2007


Denis Croombs wrote:
> I have just noticed this in my maillog file:-
> 
> Jan 15 17:11:50 isis MailScanner[22768]: Filename Checks: Allowing
> l0FHBXAF023446 msg-22768-2.txt
> Jan 15 17:11:50 isis MailScanner[22768]: Virus Scanning completed at 176
> bytes per second 
> Jan 15 17:11:50 isis MailScanner[22768]: Uninfected: Delivered 1 messages 
> Jan 15 17:11:50 isis MailScanner[22768]: Virus Processing completed at 73445
> bytes per second 
> Jan 15 17:11:50 isis MailScanner[22768]: Batch completed at 175 bytes per
> second (2128 / 12) 
> Jan 15 17:11:50 isis MailScanner[22768]: Batch (1 message) processed in
> 12.13 seconds
> 
> In my MailScanner.conf I have:-
> 
> Virus Scanners = clamavmodule bitdefender
> 
> I believe this means that clamavmodule is doing the check @ 176 bytes per
> second and bitdefender is doing the same checks @ 73445 bytes per second.

No, that's not what those messages mean.

Note the first message is "virus scanning" the second is "virus processing"

The first message pertains to the time to scan with BOTH clamavmodule AND
bitdefender.

The "Virus Processing" refers to all the post-processing. Report generation,
quarantining, sending warnings to postmaster, disarming html, etc etc etc.
Neither clamav nor bitdefender are involved here.

Take a look at the main bin/MailScanner script for all the items between:
    $batch->StartTiming('virus_processing', 'Virus Processing');
and
    $batch->StopTiming('virus_processing', 'Virus Processing');


More information about the MailScanner mailing list