Hi! As announced, I have done some testing with files containing garbage. I start a new thread as I want to get away from the vmware image related discussion.
On my X86_64 SuSE 10.1 system, equipped with 4GB main memory, I have installed the "standard" rpm clamav-0.88.7-1.2.x84_64.rpm that can be downloaded from ftp.suse.com. I have done some testing with 1GB, 2GB and 6GB files created by use of /dev/urandom. When I scan the files, all seems to run ok until a certain point. From then on, the resident size clamscan has allocated (on my system about 26M; the 'RES' column shown by 'top') starts to rise rapidly up to several GB. It takes several minutes until the resident size starts to rise. I have appended all commands and their output below. If you look at the time consumed, you can see that the 6GB file takes 60min, the 2GB file 18min, and the 1GB file only 6min. I think this is strange. About 3.5G of memory is unused before I run the scans. Please have also a look at the "Data scanned" lines: The reported size is twice the size of the file. Stephan dd if=/dev/urandom of=file bs=1048576 count=6144 dd if=/dev/urandom of=file2 bs=1048576 count=2048 dd if=/dev/urandom of=file3 bs=1048576 count=1024 ls -la total 9446432 drwxr-xr-x 2 root root 4096 2007-01-04 10:03 . drwxr-xr-x 31 root root 4096 2007-01-04 10:23 .. -rw-r--r-- 1 root root 6442450944 2007-01-03 12:17 file -rw-r--r-- 1 root root 2147483648 2007-01-04 09:58 file2 -rw-r--r-- 1 root root 1073741824 2007-01-04 10:06 file3 du -h * 6.1G file 2.1G file2 1.1G file3 clamscan --verbose --stdout --no-archive file Scanning file ----------- SCAN SUMMARY ----------- Known viruses: 86039 Engine version: 0.88.7 Scanned directories: 0 Scanned files: 1 Infected files: 0 Data scanned: 12229.56 MB Time: 3627.437 sec (60 m 27 s) clamscan --verbose --stdout --no-archive file2 Scanning file2 ----------- SCAN SUMMARY ----------- Known viruses: 86039 Engine version: 0.88.7 Scanned directories: 0 Scanned files: 1 Infected files: 0 Data scanned: 4076.48 MB Time: 1113.966 sec (18 m 33 s) clamscan --verbose --stdout --no-archive file3 Scanning file3 ----------- SCAN SUMMARY ----------- Known viruses: 86039 Engine version: 0.88.7 Scanned directories: 0 Scanned files: 1 Infected files: 0 Data scanned: 2038.00 MB Time: 412.843 sec (6 m 52 s) _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html