Hi there,

On Sun, 29 Nov 2009 lists wrote:

> Probably silly questions

They're not silly questions, and the ClamAV documentation should have
answered them all without you having to ask them.

> trying to get an idea of what goes on under the hood:

You can see exactly what goes on under the hood if you read the source
but that requires a fairly high level of programming skill.

Unless you are sure it doesn't matter (and your subject line indicates
the is not the case:), you should always say exactly what versions of
the software you are using.  If you don't say which hood, there's no
way anybody can know what goes on under it.  For example there were a
few problems with database files and directories in version 0.93.

> 1.What is the difference between cvd-v-cld?

You can delete the .cvd files.  In fact you can delete them all, and
let freshclam fetch the latest versions, but that's extra load on the
servers which you don't need to add.

It seems you already know that cvd files are compressed, as in your
second question you talk about unpacking cvd files.  You don't need
the packed versions after unpacking.  There is no .cvd file on any
of my systems, I think they were deleted by the update processes but
to be honest I can't remember if I did it myself or not.

I did this Google search:

http://www.google.co.uk/#q="daily.cld"+"daily.cvd";

and this was the second hit:

http://old.nabble.com/daily.cld-not-updating-on-remote-hosts-td20669045.html

> 2. If the .cvd's are still used, does clam unpack them and put them
> elsewhere - or does it extract them on start up?

Using Linux, at a shell prompt type

man freshclam.conf

and it explains that the database is kept uncompressed by default.  All
the databases are kept in the database directory.  There's only one.

> 3. If I create my own sigs (.ndb etc)
> a. Where would I put them? {can I define a custom directory that clam
> will look in?}

Put them in the database directory.  You could have more than one
database directory for example by messing around with links in the
filesystem, or you could use the LibClamAV library call cl_load() from
code of your own to load databases from wherever you like; but in the
former case I don't know why you'd want to (and it could also lead to
problems with permissions if you weren't careful) and in the latter
case you probably wouldn't be asking these questions.

> b. Do I need to restart clamd for them to be picked up?

man clamd

tells you how to tell the daemon about new database using its socket
interface, and

man freshclam

tells you how to get freshclam to do it for you.  Restarting the
daemon will reload the databases, and will do no harm unless there's
something talking to it at the time (such as your mailserver or some
process which is scanning lists of files and using the daemon for the
actual scanning).

--

73,
Ged.
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Reply via email to