RE: [Clamav-users] Load averages going too high when doing a full clamscan

2005-04-29 Thread Kurt Buff
Tomasz Kojm wrote: > On Thu, 28 Apr 2005 17:01:24 -0700 > Kurt Buff <[EMAIL PROTECTED]> wrote: > > > Tomasz Kojm wrote: > > > ClamAV 0.90 will support the NodalCore hardware accelerator: > > > > > > http://sourceforge.net/forum/forum.php?forum_id=458047 > > > > > With hw acceleration my old Athlo

Re: [Clamav-users] Load averages going too high when doing a full clamscan

2005-04-29 Thread Chris de Vidal
Trog said this with great authority: > If your users are also accessing the data via Samba, then use on-access > scanning via Samba VFS. The vscan module does that > http://www.openantivirus.org/projects.php#samba-vscan Another good idea! CD Ever lied? You're a liar. Ever stolen? You're a thi

Re: [Clamav-users] Load averages going too high when doing a full clamscan

2005-04-29 Thread Chris de Vidal
Lionel Bouton said this with great authority: > You may try to wrap the scan in a Perl script which only scan files with > modified mtimes. Good idea! CD Ever lied? You're a liar. Ever stolen? You're a thief. Ever hated? The bible equates hate with murder. Ever lusted? Jesus equated lust w

Re: [Clamav-users] Load averages going too high when doing a full clamscan

2005-04-29 Thread Chris de Vidal
Jakub Suchy said this with great authority: > Is it possible to access your data in differrent way than via Samba? Samba > is very ineffective and slow and is causing overheads. Maybe you should > also try 2.6.x kernel with more effective I/O scheduler We're not going through Samba to clamscan the

Re: [Clamav-users] Load averages going too high when doing a full clamscan

2005-04-29 Thread Lionel Bouton
Chris de Vidal wrote the following on 04/28/05 22:09 : >Matt Fretwell said this while chewing gum: > > >> Scan on an evening when your users are gone? >> >> > >Thanks for the fast reply! > >A 1.25TB Samba server takes several days to do a full scan with clamscan. > > > You may try to wrap

Re: [Clamav-users] Load averages going too high when doing a full clamscan

2005-04-29 Thread Drav Sloan
Chris de Vidal wrote: > > <12 line signature snipped> > > You'll like my newer, shorter one :-) > > CD > > Ever lied? You're a liar. Ever stolen? You're a theif. Ever hated? > The bible equates hate with murder. Ever lusted? Jesus equated lust with > adultery. You've broken God's law. H

Re: [Clamav-users] Load averages going too high when doing a full clamscan

2005-04-29 Thread Trog
On Fri, 2005-04-29 at 10:26 +0200, Jakub Suchy wrote: > > Rob MacGregor wrote: > >> On 4/28/05, Chris de Vidal <[EMAIL PROTECTED]> wrote: > > >>>We have a 1.25TB Samba server that > > Yes I/O bottleneck. > > Is it possible to access your data in differrent way than via Samba? Samba > is very inef

Re: [Clamav-users] Load averages going too high when doing a full clamscan

2005-04-29 Thread Jakub Suchy
> Rob MacGregor wrote: >> On 4/28/05, Chris de Vidal <[EMAIL PROTECTED]> wrote: >>>We have a 1.25TB Samba server that > Yes I/O bottleneck. Is it possible to access your data in differrent way than via Samba? Samba is very ineffective and slow and is causing overheads. Maybe you should also try

Re: [Clamav-users] Load averages going too high when doing a full clamscan

2005-04-29 Thread Bogusław Brandys
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Rob MacGregor wrote: > On 4/28/05, Chris de Vidal <[EMAIL PROTECTED]> wrote: > >>ClamAV 0.83 from dag.wieers.com >>CentOS 3.3 (A.K.A RedHat Enterprise Linux AS3) >>Kernel 2.4.28 >> >>I have a full system scan cron job. We have a 1.25TB Samba server t

Re: [Clamav-users] Load averages going too high when doing a full clamscan

2005-04-28 Thread Rob MacGregor
On 4/28/05, Chris de Vidal <[EMAIL PROTECTED]> wrote: > ClamAV 0.83 from dag.wieers.com > CentOS 3.3 (A.K.A RedHat Enterprise Linux AS3) > Kernel 2.4.28 > > I have a full system scan cron job. We have a 1.25TB Samba server that > causes the load average to go to 5+. When that happens the users n

Re: [Clamav-users] Load averages going too high when doing a full clamscan

2005-04-28 Thread Chris de Vidal
Todd Lyons said this while chewing gum: > If the scan is occurring during normal business hours, then yeah, you > need to nice the heck out of it to keep it from sucking away > performance. If you know a bit about c, you could add a commandline > option --delay=x where x is the number of milliseco

Re: [Clamav-users] Load averages going too high when doing a full clamscan

2005-04-28 Thread Tomasz Kojm
On Thu, 28 Apr 2005 17:01:24 -0700 Kurt Buff <[EMAIL PROTECTED]> wrote: > Tomasz Kojm wrote: > > ClamAV 0.90 will support the NodalCore hardware accelerator: > > > > http://sourceforge.net/forum/forum.php?forum_id=458047 > > > With hw acceleration my old Athlon 1200 was able to scan 2GB of > > d

Re: [Clamav-users] Load averages going too high when doing a full clamscan

2005-04-28 Thread Kurt Buff
Tomasz Kojm wrote: > ClamAV 0.90 will support the NodalCore hardware accelerator: > > http://sourceforge.net/forum/forum.php?forum_id=458047 > With hw acceleration my old Athlon 1200 was able to scan 2GB of > data in one minute. 2gb in one minute, ceterus paribus, means roughly 8.5 hours per ter

Re: [Clamav-users] Load averages going too high when doing a full clamscan

2005-04-28 Thread Stephen Gran
On Thu, Apr 28, 2005 at 06:15:17PM -0300, René Bellora said: > clamdscan is way faster Not necessarily. Single file: [EMAIL PROTECTED]:~$ clamscan F5D5010.exe F5D5010.exe: OK --- SCAN SUMMARY --- Known viruses: 33876 Engine version: 0.84rc2 Scanned directories: 0 Scanned files:

Re: [Clamav-users] Load averages going too high when doing a full clamscan

2005-04-28 Thread Gian Carlo
On Thu, Apr 28, 2005 at 04:18:41PM -0400, Chris de Vidal wrote: > Have you ever lied, no matter the color? I have. Have you ever stolen > anything, no matter the value? I have. Have you ever lusted? I have. > Jesus said whoever looks at a woman with lustful intent has already > committed adu

Re: [Clamav-users] Load averages going too high when doing a full clamscan

2005-04-28 Thread Jason Haar
Tomasz Kojm wrote: >With hw acceleration my old Athlon 1200 was able to scan 2GB of data in >one minute. > > 2Gb in one minute!!! That's pretty impressive - I wouldn't have thought you could do a directory listing of that much data in one minute (assuming it's not a single file of course!) --

Re: [Clamav-users] Load averages going too high when doing a full clamscan

2005-04-28 Thread Todd Lyons
Chris de Vidal wanted us to know: >Is our situation that foreign? I was half expecting someone to tell me >"We have a 5TB FTP server and can scan it all under 40 minutes with .25 >extra load average! You just have to do this..." Most people with stuff that large have a three teir system: 1) AV

Re: [Clamav-users] Load averages going too high when doing a full clamscan

2005-04-28 Thread Chris de Vidal
Morgan Smith said this while chewing gum: > Do compiler options help? YMMV but if I'm looking for speed I'll > compile from source or create an RPM from the SRPM, and I'll add some > optimizations: > ./configure CFLAGS=-O3 -march=pentium4 > > The man page for gcc may provide more insight. OK I'll

Re: [Clamav-users] Load averages going too high when doing a full clamscan

2005-04-28 Thread Morgan Smith
Chris de Vidal wrote: >ClamAV 0.83 from dag.wieers.com >CentOS 3.3 (A.K.A RedHat Enterprise Linux AS3) >Kernel 2.4.28 > >I have a full system scan cron job. We have a 1.25TB Samba server that >causes the load average to go to 5+. When that happens the users notice >and I must kill the script.

Re: [Clamav-users] Load averages going too high when doing a full clamscan

2005-04-28 Thread Tomasz Kojm
On Thu, 28 Apr 2005 16:09:55 -0400 (EDT) "Chris de Vidal" <[EMAIL PROTECTED]> wrote: > Matt Fretwell said this while chewing gum: > > Scan on an evening when your users are gone? > > Thanks for the fast reply! > > A 1.25TB Samba server takes several days to do a full scan with > clamscan. Clam

Re: [Clamav-users] Load averages going too high when doing a full clamscan

2005-04-28 Thread Chris de Vidal
Matt Fretwell said this while chewing gum: > Surely you're not doing a full scan each time, are you? Yeah, just like the large Windows boxen we run. It's a corporate requirement that we scan daily but clamscan is just too slow for a daily scan so I run it weekly. It's a decent compromise; I'd co

Re: [Clamav-users] Load averages going too high when doing a full clamscan

2005-04-28 Thread Matt Fretwell
René Bellora wrote: > clamdscan is way faster Only on a frequent stop/start type scenario. (Unless things have changed). For an extended duration scan, any difference would be negligible. Matt ___ http://lurker.clamav.net/list/clamav-users.html

Re: [Clamav-users] Load averages going too high when doing a full clamscan

2005-04-28 Thread Matt Fretwell
Chris de Vidal wrote: > > Scan on an evening when your users are gone? > > Thanks for the fast reply! > > A 1.25TB Samba server takes several days to do a full scan with > clamscan. Surely you're not doing a full scan each time, are you? How often do you scan the system? I can't answer on

Re: [Clamav-users] Load averages going too high when doing a full clamscan

2005-04-28 Thread René Bellora
Chris de Vidal wrote: ClamAV 0.83 from dag.wieers.com CentOS 3.3 (A.K.A RedHat Enterprise Linux AS3) Kernel 2.4.28 I have a full system scan cron job. We have a 1.25TB Samba server that causes the load average to go to 5+. When that happens the users notice and I must kill the script. I've even

Re: [Clamav-users] Load averages going too high when doing a full clamscan

2005-04-28 Thread Chris de Vidal
Matt Fretwell said this while chewing gum: > Scan on an evening when your users are gone? Thanks for the fast reply! A 1.25TB Samba server takes several days to do a full scan with clamscan. CD Have you ever lied, no matter the color? I have. Have you ever stolen anything, no matter the valu

Re: [Clamav-users] Load averages going too high when doing a full clamscan

2005-04-28 Thread Matt Fretwell
Chris de Vidal wrote: > Ideas? Scan on an evening when your users are gone? Matt ___ http://lurker.clamav.net/list/clamav-users.html

[Clamav-users] Load averages going too high when doing a full clamscan

2005-04-28 Thread Chris de Vidal
ClamAV 0.83 from dag.wieers.com CentOS 3.3 (A.K.A RedHat Enterprise Linux AS3) Kernel 2.4.28 I have a full system scan cron job. We have a 1.25TB Samba server that causes the load average to go to 5+. When that happens the users notice and I must kill the script. I've even reniced it to 19 wit