Chris de Vidal wrote the following on 04/28/05 22:09 : >Matt Fretwell said this while chewing gum: > > >> Scan on an evening when your users are gone? >> >> > >Thanks for the fast reply! > >A 1.25TB Samba server takes several days to do a full scan with clamscan. > > >
You may try to wrap the scan in a Perl script which only scan files with modified mtimes. Recursively list all files and for each of them do : - check if its known by your DB (Berkeley or whatever you are the most comfortable with, if you have really lots of files, say hundreds of thousands, you might want to use Perl DBI with SQLite or a full fledge SQL server) and if the mtime changed. - if new or updated file, put filename and mtime in the DB and call clamdscan else skip. You could modify this script to only run for a limited length of time in order to bootstrap the DB content over several nights. Lionel. _______________________________________________ http://lurker.clamav.net/list/clamav-users.html
