On Mar 15, 2011, at 6:56 PM, Russ Tyndall wrote: > > On Mar 15, 2011, at 4:48 PM, TR Shaw wrote: > >> Look at your config file. You don't need to scan all more than probably >> 200KB of a file. > > So you are suggesting I use the MaxScanSize directive to limit scans to the > first 200KB of each file? (i.e., add a line to clamd.conf: MaxScanSize > 200KB). > > I imagine that would speed things up nicely.... :-) >
Yes. Pick a size you feel comfy with but I believe there are few signatures that span large file sizes. You might want to override this once a week to check large zip/gz files but in general this should be good. Let me know how it helps. > >> If you're using google; don't. It will help for email but probably will not >> help finding badness on a file server. Likewise with unofficials. Not all >> unofficials are appropriate for your application. > > Sorry, Tom, I don't have the knowledge to understand this. If you haven't enabled this in your config or added other sigs then just ignore me here ;-) > >> >> Lastly when you complied you clamd what compiler options did you pick? > > I updated the bzip-related libraries and made sure I was using GCC 3.3. > > LDFLAGS="-O3 -L/opt/local/lib" > > ./configure --prefix=/usr/local --mandir=/usr/local/share/man > --sysconfdir=/private/etc/spam/clamav/new --enable-bigstack > --with-user=clamav --enable-static --with-group=clamav > --with-dbdir=/var/clamav --datadir=/var/clamav > > Then, make and install. > That's probably as good as you can do for now. If you can get a 10.5 lics then do it as 10.5 fixes some low level process switch slowdowns that were in Tiger. It isn't a panacea but it should help a bit also. Tom _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
