actual Esets wrapper use expensive routine

Nicola Piazzi Nicola.Piazzi at gruppocomet.it
Tue Jan 8 07:46:28 UTC 2019


Hi
Esets wrapper uses esets_scan program that load libraries each time,
this sw is included in esets file security for linux package
this is the output that it is able to parse

[root at EFA42 /]# time /opt/eset/esets/sbin/esets_scan /eicar.txt
ESET Command-line scanner, version 4.5.13, (C) 1992-2018 ESET, spol. s r.o.
Using license: COMET - lfs (/etc/opt/eset/esets/license/esets_26911c.lic)
Module loader, version 1072 (20180813), build 1118
Module perseus, version 1546 (20181127), build 1996
Module scanner, version 18652 (20190104), build 39938
Module archiver, version 1281 (20181213), build 1365
Module advheur, version 1191 (20181106), build 1171
Module cleaner, version 1172 (20181113), build 1247
Command line: /eicar.txt
Scan started at:   Tue 08 Jan 2019 08:40:25 AM CET
name="/eicar.txt", threat="Eicar test file", action="cleaned by deleting", info=""
Scan completed at: Tue 08 Jan 2019 08:40:25 AM CET
Scan time:         0 sec (0:00:00)
Total:             files - 1, objects 1
Infected:          files - 0, objects 0
Cleaned:           files - 1, objects 1
real    0m4.184s
user    0m4.040s
sys     0m0.132s

As you can see it use more than 4 seconds of cpu each scan
Esets have same package licensed as mail security (about same price) and it use esets_cli that call preloaded daemon and take very few resources
[root at EFA42 /]# time /opt/eset/esets/bin/esets_cli /eicar.txt
/eicar.txt: action="rejected"
/eicar.txt: virus="Eicar test file"
real    0m0.011s
user    0m0.000s
sys     0m0.001s

Is possible to write a wrapper and all interface for this ?

Using esets_cli in conjunction with clamd we can have a powered double scan feature with very low cpu consumption










Nicola Piazzi
CED - Sistemi
COMET s.p.a.
Via Michelino, 105 - 40127 Bologna - Italia
Tel.  +39 051.6079.293
Cell. +39 328.21.73.470
Web: www.comet.it<http://www.comet.it/>
[Nuova immagine bitmap]

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20190108/d67cf38d/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.png
Type: image/png
Size: 6129 bytes
Desc: image001.png
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20190108/d67cf38d/attachment.png>


More information about the MailScanner mailing list