Ah, so when you have things like the 14/15 minute delay, the delay may not be that long?
> On Sep 13, 2018, at 2:16 AM, Paul Kosinski <[email protected]> wrote: > > "What is the interval that you run this?" > > Every 15 minutes by cron, specifically: > > OCBG='/opt/clamav/bin/getfreshclam' > > 3 * * * * root test -x $OCBG && /usr/bin/sudo -u clamav $OCBG && > /usr/bin/killall -HUP havp80c && /usr/bin/killall -HUP havp80d > 18 * * * * root test -x $OCBG && /usr/bin/sudo -u clamav $OCBG && > /usr/bin/killall -HUP havp80c && /usr/bin/killall -HUP havp80d > 33 * * * * root test -x $OCBG && /usr/bin/sudo -u clamav $OCBG && > /usr/bin/killall -HUP havp80c && /usr/bin/killall -HUP havp80d > 48 * * * * root test -x $OCBG && /usr/bin/sudo -u clamav $OCBG && > /usr/bin/killall -HUP havp80c && /usr/bin/killall -HUP havp80d > > > (Original post mentioned the interval in passing in the text.) > >>> Attached is the code we use to update ClamAV: 'getfreshclam' is run >>> by cron under userid clamav (same as clamd) every so often >>> (currently every 15 mins) to determine if there are any relevant > > ---------- > > On Wed, 12 Sep 2018 20:59:45 +0000 > "Joel Esler (jesler)" <[email protected]> wrote: > >> What is the interval that you run this? >> >>> On Sep 12, 2018, at 4:53 PM, Paul Kosinski <[email protected]> >>> wrote: >>> >>> Joel (and any other interested parties), >>> >>> Attached is the code we use to update ClamAV: 'getfreshclam' is run >>> by cron under userid clamav (same as clamd) every so often >>> (currently every 15 mins) to determine if there are any relevant >>> cvd files to update (currently daily.cvd, bytecode.cvd and >>> main.cvd). >>> >>> Only if something is *really* there -- as determined by *both* the >>> DNS TXT record and quick 'curl' of the head of the cvd file -- is >>> 'freshclam' invoked to do the actual work. This ensures that running >>> the test pretty often doesn't put a big load on the servers. >>> >>> Notes to help understanding the code: >>> >>> 'testclam-external' does the DNS TXT and curl test. >>> >>> 'report-delays' logs the delays (or non- delays) found. >>> >>> We keep various recent versions of ClamAV in /opt/clamav.d, both for >>> testing, and in case we have to backtrack. Thus, /opt/clamav is a >>> symlink to the current version, as in: >>> >>> /opt/clamav -> /opt/clamav.d/clamav.0.100.1 >>> >>> >>> Enjoy! >>> Paul Kosinski > _______________________________________________ > clamav-users mailing list > [email protected] > http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users > > > Help us build a comprehensive ClamAV guide: > https://github.com/vrtadmin/clamav-faq > > http://www.clamav.net/contact.html#ml _______________________________________________ clamav-users mailing list [email protected] http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml
