Hello Paul,
Zitat von Paul Kosinski <cla...@iment.com>:
Kare,
Thanks for the suggestion. I also had thought of using the clamd
socket interface, but won't do that unless there is no other way.
HAVP is running here on a minimal 2-core Athlon II (3.1 GHz) and HAVP
by itself comprises over 10 processes. Given this configuration, I
fear that using the socket interface instead of the direct libclamav
interface would reduce HTTP throughput noticeably.
I think, you are wrong! In Socket mode, HAVP do not load the clamav
databases by itself, instead of that, it uses the one of clamav. HAVP
ist starting faster and (I think) a little bit faster in scanning.
The disadvantage is, that if there is a database reload after an
update and you try to download or open a website, the browser hangs
during this time. As I know, the clamlib mode should be a little bit
more stable.
Paul
P.S. Would the clamd socket allow HAVP to do the "cut through"
scanning that it does when "mandatory locking" is possible?
As far as I know, yes
regards, Kare
I saw this discussion about failing havp with ClamAV 0.98.4 and we
also use havp in our project for a long time.
There is a way to get havp working, until an other solution has been
found.
Go to havp.config and disable clamlib and enabel the socket mode
ENABLECLAMLIB false
ENABLECLAMD true
CLAMDSOCKET /var/log/clamd.socket
I planned to contact the developer on weekend
_______________________________________________
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq
http://www.clamav.net/support/ml
_______________________________________________
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq
http://www.clamav.net/support/ml
