Török Edwin wrote: > On 2009-03-04 21:53, Jose-Marcio Martins da Cruz wrote: >> Török Edwin wrote: >> >>> On 2009-03-04 19:44, Dennis Peterson wrote: >>> >> >>>>> >>>>> >>>> Is there not a "nice" way to do this? >>>> >>> 0.95rc1 does reload "nicer", in the sense that it accepts new >>> connections while reloading the DB. >>> Reloading the database should take about a second. Using anything less >>> than 100% CPU wouldn't be possible, it would just make loading the >>> database longer. >>> >> Maybe I'm not interpreting this as it would... >> >> This is a Sun T2000 8 cores, with 8 GB memory. So, this isn't a very >> small computer. >> >> From clamd logs, I have this. >> >> Wed Mar 4 11:59:36 2009 -> SelfCheck: Database modification detected. >> Forcing reload. >> Wed Mar 4 11:59:36 2009 -> Reading databases from /opt/clamav/db >> Wed Mar 4 11:59:51 2009 -> Database correctly reloaded (514191 signatures) >> Wed Mar 4 11:59:51 2009 -> WARNING: lstat() failed on: >> /var/spool/jchkmail/49AE5F17.000.0000 >> > > Was your clamd heavily loaded at that time? > How long does this take: > $ time clamscan /dev/null > > It takes 0.68 seconds here (Intel Core 2 Quad Q9550 @2.83 Ghz). > > It also depends if you've got a .cvd or .cld file, .cld files are > uncompressed, hence they load faster. > Here's how long it takes to load .cvd: 1.2s > > On a Solaris10/sparc box (UltraSPARC-IIi 440Mhz) it takes 18s. >
Sparc Solaris 9, 500Mhz $ time clamscan /dev/null ERROR: Not supported file type (/dev/null) ----------- SCAN SUMMARY ----------- Known viruses: 563036 Engine version: 0.95rc1 Scanned directories: 0 Scanned files: 0 Infected files: 0 Data scanned: 0.00 MB Time: 26.808 sec (0 m 26 s) real 0m26.84s user 0m24.73s sys 0m1.76s RedHat Linux, 3gHz # time clamscan /dev/null LibClamAV Warning: ************************************************** LibClamAV Warning: *** The virus database is older than 7 days! *** LibClamAV Warning: *** Please update it as soon as possible. *** LibClamAV Warning: ************************************************** ERROR: Not supported file type (/dev/null) ----------- SCAN SUMMARY ----------- Known viruses: 208929 Engine version: 0.95rc1 Scanned directories: 0 Scanned files: 0 Infected files: 0 Data scanned: 0.00 MB Time: 1.478 sec (0 m 1 s) real 0m1.481s user 0m1.247s sys 0m0.230s And the warning is bogus - the db is minutes old. The RedHat system will load the DB in 15 seconds. Cold start of clam, Solaris 9: $ time /usr/local/sbin/clamd real 0m34.20s user 0m25.72s sys 0m1.22s Cold start of clamd, RedHat: time /usr/local/sbin/clamd real 0m3.504s user 0m2.349s sys 0m0.374s I think this cannot be cpu speed alone but you never know. dp _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
