On Fri, 2013-12-13 at 08:57 -0800, Charles Swiger wrote: > On Dec 13, 2013, at 6:12 AM, 黄海涛 <[email protected]> wrote: > > when virus database(main.cvd & daily.cvd) is loader which consumers > 206M memory, > > is there any way to reduce memory, such as by using simplified > version of virus database (Does small virus database exist?) > > or by filtering some lowerly-graded sig,or by editing clamav.conf ? > > Fixed-pattern matching is fast and requires minimal resources via > Boyer-Moore and such, but there isn't a quick-and-easy way to do more > complicated regex pattern matching without compiling the patterns into > a DFA or similar, which does require a fair amount of memory. > > However, you can run clamd and have it listen on a network socket so > that you can run clamdscan from systems with low memory and have the > scanning happen on a machine with more resources.
This is much better solution for systems that have low memory available. Much better than running without the main virus signature DB. This solution also assumes you have a well apportioned machine available to your other machines and actually have a network connection between them. Virus/Trojan scanning and small memory are typically not something you can have together, since resources are required for tracking the millions of Virus/Trojans and variants. -- greg folkert - systems administration and support web: donor.com email: [email protected] phone: 877-751-3300 x416 direct: 616-328-6449 (direct dial and fax) "The fabric of existence weaves itself whole." -- Charles Ives _______________________________________________ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/support/ml
