Dave Sill via clamav-users <clamav-users@lists.clamav.net> wrote: > > > >Skipping multiple copies of the same file won't really help because > > >the duplication is across systems, and because every file will be > > >rescanned every time clamscan is run. > > > > That's not true of clamdscan. > > Hmm...that's promising. I'll give it a try.
Unfortunately, it looks like the cache is too small to help. I ran clamdscan twice on my /home (69k files) and got: # clamdscan --fdpass /home /home/de5/eicar.tar.gz: Eicar-Signature FOUND WARNING: /home/de5/.cisco/hostscan/.libcsd.ipc: Not supported file type WARNING: Directory recursion limit reached WARNING: Directory recursion limit reached WARNING: Directory recursion limit reached WARNING: Directory recursion limit reached WARNING: Directory recursion limit reached WARNING: Directory recursion limit reached WARNING: Directory recursion limit reached WARNING: Directory recursion limit reached WARNING: Directory recursion limit reached WARNING: Directory recursion limit reached WARNING: Directory recursion limit reached WARNING: Directory recursion limit reached WARNING: Directory recursion limit reached WARNING: Directory recursion limit reached /home/s4i/eicar.tar.gz: Eicar-Signature FOUND ----------- SCAN SUMMARY ----------- Infected files: 2 Total errors: 1 Time: 1428.433 sec (23 m 48 s) # clamdscan --fdpass /home /home/de5/eicar.tar.gz: Eicar-Signature FOUND WARNING: /home/de5/.cisco/hostscan/.libcsd.ipc: Not supported file type WARNING: Directory recursion limit reached WARNING: Directory recursion limit reached WARNING: Directory recursion limit reached WARNING: Directory recursion limit reached WARNING: Directory recursion limit reached WARNING: Directory recursion limit reached WARNING: Directory recursion limit reached WARNING: Directory recursion limit reached WARNING: Directory recursion limit reached WARNING: Directory recursion limit reached WARNING: Directory recursion limit reached WARNING: Directory recursion limit reached WARNING: Directory recursion limit reached WARNING: Directory recursion limit reached /home/s4i/eicar.tar.gz: Eicar-Signature FOUND ----------- SCAN SUMMARY ----------- Infected files: 2 Total errors: 1 Time: 1355.057 sec (22 m 35 s) # But on /boot, with 342 files: # clamdscan --fdpass /boot /boot: OK ----------- SCAN SUMMARY ----------- Infected files: 0 Time: 21.186 sec (0 m 21 s) # clamdscan --fdpass /boot /boot: OK ----------- SCAN SUMMARY ----------- Infected files: 0 Time: 0.362 sec (0 m 0 s) # I don't see that the cache size is run-time configurable. Is that right? -Dave _______________________________________________ clamav-users mailing list clamav-users@lists.clamav.net https://lists.clamav.net/mailman/listinfo/clamav-users Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml
