I searched the archives, but didn't see an answer so pardon me if it's a FAQ. How often is it reasonable to call freshclam (either from cron or in daemon mode) to check for new virusdb updates? Obviously there's a tradeoff between detecting fast spreading viruses like MyDoom and overloading the db servers.
Is once an hour too often? Once every 3-4 hours?
Once an hour is fine, but if you use crontab please add a once randomly chosen sleep between 0 and 3599 second before launching freshclam.
As lots of people using crontab put something like 0 * * * * ... The database mirrors have huge peaks of bandwidth usage each hour (and what's not good for the mirrors isn't good for the virus db availability).
Something like :
# echo $[ $RANDOM % 3600 ] 0 * * * * sleep <value_given_above>; freshclam --quiet
Best regards,
-- Lionel Bouton - inet6 --------------------------------------------------------------------- o Siege social: 51, rue de Verdun - 92158 Suresnes / _ __ _ Acces Bureaux: 33 rue Benoit Malon - 92150 Suresnes / /\ /_ / /_ France \/ \/_ / /_/ Tel. +33 (0) 1 41 44 85 36 Inetsys S.A. Fax +33 (0) 1 46 97 20 10
------------------------------------------------------- SF.Net is sponsored by: Speed Start Your Linux Apps Now. Build and deploy apps & Web services for Linux with a free DVD software kit from IBM. Click Now! http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click _______________________________________________ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
