Hi!

As announced, I have done some testing with files containing garbage.
I start a new thread as I want to get away from the vmware image related 
discussion.

On my X86_64 SuSE 10.1 system, equipped with 4GB main memory, I have installed 
the "standard" rpm
clamav-0.88.7-1.2.x84_64.rpm that can be downloaded from ftp.suse.com. I have 
done some testing
with 1GB, 2GB and 6GB files created by use of /dev/urandom. When I scan the 
files, all seems to run ok
until a certain point. From then on, the resident size clamscan has allocated 
(on my system about 26M;
the 'RES' column shown by 'top')  starts to rise rapidly up to several GB. It 
takes several minutes
until the resident size starts to rise. I have appended all commands and their 
output below.
If you look at the time consumed, you can see that the 6GB file takes 60min, 
the 2GB file 18min, and
the 1GB file only 6min. I think this is strange. About 3.5G of memory is unused 
before I run the 
scans. Please have also a look at the "Data scanned" lines: The reported size 
is twice the size of the file.

Stephan


dd if=/dev/urandom of=file bs=1048576 count=6144
dd if=/dev/urandom of=file2 bs=1048576 count=2048
dd if=/dev/urandom of=file3 bs=1048576 count=1024

ls -la
total 9446432
drwxr-xr-x  2 root    root        4096 2007-01-04 10:03 .
drwxr-xr-x 31 root    root        4096 2007-01-04 10:23 ..
-rw-r--r--  1 root    root  6442450944 2007-01-03 12:17 file
-rw-r--r--  1 root    root  2147483648 2007-01-04 09:58 file2
-rw-r--r--  1 root    root  1073741824 2007-01-04 10:06 file3

du -h *
6.1G    file
2.1G    file2
1.1G    file3


clamscan --verbose --stdout --no-archive file
Scanning file


----------- SCAN SUMMARY -----------
Known viruses: 86039
Engine version: 0.88.7
Scanned directories: 0
Scanned files: 1
Infected files: 0
Data scanned: 12229.56 MB
Time: 3627.437 sec (60 m 27 s)

clamscan --verbose --stdout --no-archive file2
Scanning file2

----------- SCAN SUMMARY -----------
Known viruses: 86039
Engine version: 0.88.7
Scanned directories: 0
Scanned files: 1
Infected files: 0
Data scanned: 4076.48 MB
Time: 1113.966 sec (18 m 33 s)

clamscan --verbose --stdout --no-archive file3
Scanning file3

----------- SCAN SUMMARY -----------
Known viruses: 86039
Engine version: 0.88.7
Scanned directories: 0
Scanned files: 1
Infected files: 0
Data scanned: 2038.00 MB
Time: 412.843 sec (6 m 52 s)
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html

Reply via email to