You are doing something wrong or your math is horribly bad. My average time in qmail-scanner-queue with Kaspersky is 0.209551 seconds.
(and actually, clamav is a little faster and freeer (is that a word?), taking 0.127474 seconds per scan on a comparable machine, of course I have no idea on the file sizes scanned, just parsing the logs)
Taken from thousands of lines like this:
16/06/2003 18:41:41:5607: all finished. Total of 0.082817 secs 16/06/2003 18:41:45:5625: all finished. Total of 1.148456 secs 16/06/2003 18:41:45:5627: all finished. Total of 1.178923 secs 16/06/2003 18:41:46:5655: all finished. Total of 0.78068 secs 16/06/2003 18:41:50:5688: all finished. Total of 0.082702 secs 16/06/2003 18:41:50:5716: all finished. Total of 0.121021 secs 16/06/2003 18:41:58:5738: all finished. Total of 0.051963 secs 16/06/2003 18:42:05:5791: all finished. Total of 0.071962 secs 16/06/2003 18:42:17:5845: all finished. Total of 1.563344 secs 16/06/2003 18:42:18:5852: all finished. Total of 0.573719 secs 16/06/2003 18:42:18:5848: all finished. Total of 1.628198 secs 16/06/2003 18:42:20:5869: all finished. Total of 2.945685 secs 16/06/2003 18:42:24:5934: all finished. Total of 0.124624 secs 16/06/2003 18:42:24:5935: all finished. Total of 0.209551 secs 16/06/2003 18:42:24:5970: all finished. Total of 0.226913 secs
Regards,
Rick
Ryan Finnie wrote:
Okay, I've been a bit out of touch lately, so here we go... Yes, turns out the AVP version I was running was horribly out of date. Now I've figured out how to use kavdaemon 4.0.3.1 with Q-S. But first, a little background:
The good: * Kaspersky's linux client is great at doing it's job, once you set it up correctly. * kavdaemon is FAST, incredibly fast, very accurate and feature-filled (can scan mbox groups, parse mime, read a couple dozen types of compressed files, etc). I've actually commented out &deconstruct_msg in q-s to save time; all it does now is scan the one mime message. * Virus updates are very up-to-date. It caught bugbear.b (tanatos) on one of my machines almost immediately after it was out in the wild. * It's relatively cheap, and they give free trials if you ask.
And the bad: * The universal installer is crap. I just end up extracting the tarball and manually moving stuff around. * They have a tendency to change stuff around (flags, etc) whenever they feel like it. Most people have seemed to give up on the daemon because of this, but not I. * Documentation is often misleading. * Logging is not too verbose.
Now, how to actually use kavdaemon. Start kavdaemon by doing: /opt/AVP/kavdaemon -I0 -Y /var If you want to be able to scan more directories beside /var through the daemon, you can edit /opt/AVP/etc/defUnix.prf and put the directories that you want under Object->Names, then just do "/opt/AVP/kavdaemon -I0 -Y" instead. Be sure to prefix the directory with a *, which says the directory is "enabled". Oh, and this took me awhile to figure out -- "/" will NOT be accepted in either location as a valid allowable directory. If you want kavdaemon to be able to scan anywhere on the filesystem, you must specify all of the top-level directories in defUnix.prf. Yes, it's annoying. Personally though, I just use the virus scanner on mail servers, so /var is the only directory I need to scan within, so it works out.
As for q-s itself, here's a modified version of the code I first released:
http://www.finnie.org/stuff/q-s_avpdaemon.txt
Once this is set up, the scans are fast... average 2 seconds per message.
RF
------------------------------------------------------- This SF.Net email is sponsored by: INetU Attention Web Developers & Consultants: Become An INetU Hosting Partner. Refer Dedicated Servers. We Manage Them. You Get 10% Monthly Commission! INetU Dedicated Managed Hosting http://www.inetu.net/partner/index.php _______________________________________________ Qmail-scanner-general mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general
