Bond, You can use 'sigtool --unpack-current [daily|main|bytecode]' to unpack the virus database. Then remove/edit out the files/sigs that are not of interest. Then use the clamd.conf DatabaseDir parameter to point to the result. docs/signatures.pdf may help.
Also, look at ./configure --help to remove any other software you don't think you'll need for your clamd. The largest memory saving will be from './configure --enable-llvm=no'. Steve On Fri, Nov 20, 2015 at 9:00 PM, Bond Masuda <bond.mas...@hexadiam.com> wrote: > my question is in the subject line, but my goal is to reduce the memory > footprint of clamd. it current takes over 350MB and that's a bit too much. > > so, i'm wondering how I can narrow down the signature database to reduce > this memory footprint. specifically, i only care about malware that is > relevant to Linux platform, and not other OSes like Windows. is there a > way for me to reduce the signature database just to signatures relevant > to my OS platform? I'm currently using clamav/clamd on CentOS 6 and my > signatures are updated via the cron freshclam. > > are there other ways to reduce the memory footprint of clamd? > > thanks, > Bond > _______________________________________________ > Help us build a comprehensive ClamAV guide: > https://github.com/vrtadmin/clamav-faq > > http://www.clamav.net/contact.html#ml > _______________________________________________ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml
