I tried the test mentioned below and noticed my times were almost
identical.  I found the cause of this to be that my clamdscan was
symlinked to clamscan so they were 1 and the same.  Then i recalled a step
from the qmailrocks (www.qmailrocks.org) installation instructions that
says to rename clamdscan -> clamdscan.orig and symlink clamdscan to
clamscan.  This causes qmailscanner to detect clamuko instead of clamscan.

So, now im thinking, why was this done?  Im not sure if anyone here can
answer this, but what is clamuko and why would this be preferred over
clamdscan?

Thanks.
Jim Maul


> A simple comparison (very rough, but shows the idea):
>
> $ time clamscan /etc/services
> /etc/services: OK
>
> ----------- SCAN SUMMARY -----------
> [...]
> Data scanned: 0.01 Mb
> I/O buffer size: 131072 bytes
> Time: 0.721 sec (0 m 0 s)
>
> real    0m0.726s
> user    0m0.680s
> sys     0m0.040s
>
>
> $ time clamdscan /etc/services
> /etc/services: OK
>
> ----------- SCAN SUMMARY -----------
> Infected files: 0
> Time: 0.008 sec (0 m 0 s)
>
> real    0m0.012s
> user    0m0.000s
> sys     0m0.000s
>
>
> Depending on which times one compares, one gets:
>
> 0.721/0.008 ~= 90  or:
>
> 0.726/0.012 ~= 60.
>
> You can see the difference! ;-)
>
> --
>

Attachment: smime.p7s
Description: S/MIME cryptographic signature

Reply via email to