On 3/27/07, aCaB <[EMAIL PROTECTED]> wrote:
Hi shuttlebox,
Thank you for answering.
What's a regular file? If "regular file" means "not an archive" or "something which doesn't require processing" then I agree with you. Scanning archives, by definition, takes longer than scanning "non archives".
With regular I meant the df-file as opposed to the PPT-file, I assume no special treatment is applied to the df-file since that's probably not recognized by Clam. The PPT seems to trigger the OLE2-code and a major slowdown occurs, I assume this from the result with --no-ole2.
OLE2 files are archives, hence they scan slowly.
Are PPT-files archives, I didn't know that?
Now, are you saying that a particular PPT file takes ages or that every PPT file scans slowly?
Every one I have tested so far has been very slow. I haven't tested many though, that's why I asked if anyone recognized the problem.
If the former, then please provide us with the slow-scanning file. If the latter then you may want to tweak your scan options.
Can't do that since the client is a hospital with strict confidentiality. I don't think it's the particular document(s) though - but the type of document. How may I tweak my scan options? Is turning off OLE2 an option? -- /peter _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html
