Hi there, On Sun, 29 Nov 2009 lists wrote:
> Probably silly questions They're not silly questions, and the ClamAV documentation should have answered them all without you having to ask them. > trying to get an idea of what goes on under the hood: You can see exactly what goes on under the hood if you read the source but that requires a fairly high level of programming skill. Unless you are sure it doesn't matter (and your subject line indicates the is not the case:), you should always say exactly what versions of the software you are using. If you don't say which hood, there's no way anybody can know what goes on under it. For example there were a few problems with database files and directories in version 0.93. > 1.What is the difference between cvd-v-cld? You can delete the .cvd files. In fact you can delete them all, and let freshclam fetch the latest versions, but that's extra load on the servers which you don't need to add. It seems you already know that cvd files are compressed, as in your second question you talk about unpacking cvd files. You don't need the packed versions after unpacking. There is no .cvd file on any of my systems, I think they were deleted by the update processes but to be honest I can't remember if I did it myself or not. I did this Google search: http://www.google.co.uk/#q="daily.cld"+"daily.cvd" and this was the second hit: http://old.nabble.com/daily.cld-not-updating-on-remote-hosts-td20669045.html > 2. If the .cvd's are still used, does clam unpack them and put them > elsewhere - or does it extract them on start up? Using Linux, at a shell prompt type man freshclam.conf and it explains that the database is kept uncompressed by default. All the databases are kept in the database directory. There's only one. > 3. If I create my own sigs (.ndb etc) > a. Where would I put them? {can I define a custom directory that clam > will look in?} Put them in the database directory. You could have more than one database directory for example by messing around with links in the filesystem, or you could use the LibClamAV library call cl_load() from code of your own to load databases from wherever you like; but in the former case I don't know why you'd want to (and it could also lead to problems with permissions if you weren't careful) and in the latter case you probably wouldn't be asking these questions. > b. Do I need to restart clamd for them to be picked up? man clamd tells you how to tell the daemon about new database using its socket interface, and man freshclam tells you how to get freshclam to do it for you. Restarting the daemon will reload the databases, and will do no harm unless there's something talking to it at the time (such as your mailserver or some process which is scanning lists of files and using the daemon for the actual scanning). -- 73, Ged. _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml