Hi there, On Sat, 18 Apr 2020, Karmendra Suthar via clamav-users wrote:
Is there a server-agent model in ClamAV ...
Not exactly. Several databases of signatures and similar things exist, which ClamAV can use when it looks for undesirables. Some of the databases are maintained by the ClamAV authors, others are maintained by community members and/or commercial organizations. The objectives of the databases differ widely. Some for example primarily target malicious code for a variety of operating systems, others are more concerned with spam and similar things usually found in email. The policies for (and the frequencies of) updating the databases differ. In any ClamAV installation it is possible to use multiple databases, and commonly ClamAV users who have only one or two machines to scan will point their freshclam instances at the remote database servers[*], wherever those are, to obtain copies of the signature databases for each individual ClamAV installation by direct downloading. However it is possible to maintain one single local mirror of your own, update the mirror from the remote databases, and point your ClamAV installations at the mirror. This may save some bandwidth, but that's about as far as it goes for managing databases in the way which you describe. [*] They're more like read-only file servers than database servers. ClamAV provides a daemon called 'clamd' which can listen on a TCP port for connections from a client. The daemon can scan data sent to it over such connections. I run clamd in this way, on a separate server, and pass email data to it from a Sendmail 'milter' which runs on a mail server. I normally scan nothing except email, and many users do the same, but I think most users of ClamAV do not use it in this way; I think they mostly run clamscan (or clamd plus clamdscan) on the machines which contain the data which is to be scanned. The scanning process can be heavy on CPU and memory. Your mileage, as they say, may vary.
Didn't find information in official documentation as well, do not know which document to check.
http://www.clamav.net/documents/clam-antivirus-user-manual Perhaps if you describe your use case more fully we can help more. You haven't asked about performance... -- 73, Ged. _______________________________________________ clamav-users mailing list clamav-users@lists.clamav.net https://lists.clamav.net/mailman/listinfo/clamav-users Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml
