On Mar 16, 2011, at 12:11 PM, Bowie Bailey wrote: > To minimize the risk of a signature being added after the file gets on > the computer, you could continue to scan for a while, rather than using > the 60 minute limit. Depending on your system usage, a limit of one or > two days might still decrease your scan time far enough while still > allowing files to be rescanned with newer signatures.
Yes, it seems I can expand the modification date out to multiple days with little impact on scan times. In my unscientific testing, I went 3 days and the scan time still stayed under 10 minutes for a directory with 15GB of data. If I scanned the entire directory, the scan time would be about 2 hours. I believe I could go out much longer than 3 days and still keep the scan periods down to a "reasonable" time. ----------------- Russ Tyndall Wake Forest, NC _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
