The code for loading the data directories will give priority to loading the
ignore list (from ign2 files and from the daily.ign2 inside daily.cvd)
before loading signatures, which is just a list of signature names.
The rest of the signatures are loaded after that. Then every signature name
is chec
Hello again,
On Mon, 8 Apr 2019, Arnaud Jacques wrote:
Le 07/04/2019 ? 18:18, G.W. Haywood via clamav-users a ?crit?:
> > grep -a '^Phishtank.Phishing' daily.cld | cut -d':' -f1 >
> ~/phishtank.ign2
This is not optimized :
Phishtank.Phishing are loaded in memory.
Then phishtank.ign2 is loaded
Let us take a look at separating them.
Sent from my iPhone
> On Apr 7, 2019, at 14:03, Steve Basford
> wrote:
>
>> On 7 April 2019 17:25:56 Arnaud Jacques wrote:
>>
>>
>> ... and one day I created a *huge* ign2 file and it crashed clamd. Ign2
>> files may not be appropriate to ignore to
On 7 April 2019 17:25:56 Arnaud Jacques wrote:
... and one day I created a *huge* ign2 file and it crashed clamd. Ign2
files may not be appropriate to ignore tons of signatures.
From memory.. daily.info (inside the daily.cvd) contains the database names
included.
If all phishtank sigs we
Hello,
Le 07/04/2019 à 18:18, G.W. Haywood via clamav-users a écrit :
Hi there,
On Sun, 7 Apr 2019, Maarten Broekman wrote:
Given that the PhishTank signatures, specifically, have been causing the
performance issues, no. It's not unreasonable to want to pull them, and
only them, out. Having t
Hi there,
On Sun, 7 Apr 2019, Maarten Broekman wrote:
Given that the PhishTank signatures, specifically, have been causing the
performance issues, no. It's not unreasonable to want to pull them, and
only them, out. Having them in a separate db file would be highly
beneficial to those of us that
snyd)"
Subject: Re: [clamav-users] Scan very slow
Hi Mark,
Sorry about the delay in responding. I hadn’t looked at my clamav-users filter
this morning. Just investigating now. Will respond when I know more.
-Micah
From: Mark Allan
Date: Friday, April 5, 2019 at 9:12 AM
To: ClamAV user
mailto:clamav-users-boun...@lists.clamav.net>>
on behalf of Mark Allan via clamav-users
mailto:clamav-users@lists.clamav.net>>
> Reply-To: ClamAV users ML
mailto:clamav-users@lists.clamav.net>>
> Date: Monday, March 25, 2019 at 9:37 AM
> To: ClamAV users ML
mailto:c
Already tried that.
Mark
On Fri, 5 Apr 2019 at 14:20, Joel Esler (jesler) wrote:
>
> On Apr 5, 2019, at 09:13, Mark Allan via clamav-users <
> clamav-users@lists.clamav.net> wrote:
>
> Also CC'ing Micah directly as the mailing list would appear to be offline
> (at least lists.clamav.net isn't
> On Apr 5, 2019, at 09:13, Mark Allan via clamav-users
> wrote:
>
> Also CC'ing Micah directly as the mailing list would appear to be offline (at
> least lists.clamav.net isn't responding to http requests anyway
May want to try https.
smime.p7s
Description: S/MIME cryptographic signature
_
may be slowing down scans.
> >
> > Regards,
> > Micah
> >
> >
> > From: clamav-users on
> behalf of Mark Allan via clamav-users
> > Reply-To: ClamAV users ML
> > Date: Monday, March 25, 2019 at 9:37 AM
> > To
ignatures that may be slowing down scans.
>
> Regards,
> Micah
>
>
> From: clamav-users on behalf of
Mark Allan via clamav-users
> Reply-To: ClamAV users ML
> Date: Monday, March 25, 2019 at 9:37 AM
> To: ClamAV users ML
> Cc: Mark Allan
ds for signatures that may be slowing down scans.
>
> Regards,
> Micah
>
>
> From: clamav-users on behalf of Mark
> Allan via clamav-users
> Reply-To: ClamAV users ML
> Date: Monday, March 25, 2019 at 9:37 AM
> To: ClamAV users ML
> Cc: Mark Allan
> Subject: Re: [
.
Regards,
Micah
From: clamav-users on behalf of Mark
Allan via clamav-users
Reply-To: ClamAV users ML
Date: Monday, March 25, 2019 at 9:37 AM
To: ClamAV users ML
Cc: Mark Allan
Subject: Re: [clamav-users] Scan very slow
Cheers Steve,
In the interest of completeness, here's the scan from
Cheers Steve,
In the interest of completeness, here's the scan from today (TXT from DNS:
0.101.1:58:25399:1553509741:1:63:48528:328) showing a marked improvement in
scan time, although at 6m 7s it's still almost twice what it used to be.
Mark
On Mon, 25 Mar 2019 at 12:56, Steve Basford
wrote:
On 2019-03-25 10:52, Mark Allan via clamav-users wrote:
Hi all,
te.
Hopefully this helps someone to narrow things down a bit.
Mark
18/3/19 10m 49s TXT from DNS:
0.101.1:58:25392:1552904941:1:63:48507:328 ***
Here's the changes for the above update:
https://lists.gt.net/clamav/virusd
arch/007737.html
>
> *De :* Al Varnell
> *Envoyé :* samedi 23 mars 2019 10:55
> *À :* ClamAV users ML
> *Objet :* Re: [clamav-users] Scan very slow
>
> Reference? First I'm hearing of any such thing.
>
> -Al-
>
>
> On Mar 23, 2019, at 02:26, Jean-Michel
rs/2019-March/007737.html
> <https://lists.clamav.net/pipermail/clamav-users/2019-March/007737.html>
>
> De : Al Varnell
> Envoyé : samedi 23 mars 2019 10:55
> À : ClamAV users ML
> Objet : Re: [clamav-users] Scan very slow
>
> Reference? First I'm hearin
See Maarten Broekman tests above
https://lists.clamav.net/pipermail/clamav-users/2019-March/007737.html
De : Al Varnell
Envoyé : samedi 23 mars 2019 10:55
À : ClamAV users ML
Objet : Re: [clamav-users] Scan very slow
Reference? First I'm hearing of any such thing.
-Al-
O
ble to fix the problem?
> Regards
>
> De : Micah Snyder (micasnyd) mailto:micas...@cisco.com>>
> Envoyé : lundi 18 mars 2019 18:09
> À : ClamAV users ML <mailto:clamav-users@lists.clamav.net>>
> Objet : Re: [clamav-users] Scan very slow
>
> Maarten,
>
Hi,
Micah Snyder, Do you know if Clamav was able to trace the orgine of getting
crawled in the database "daily.cld" and was able to fix the problem?
Regards
De : Micah Snyder (micasnyd)
Envoyé : lundi 18 mars 2019 18:09
À : ClamAV users ML
Objet : Re: [clamav-users] Scan
18, 2019 at 10:37 AM
To: ClamAV users ML
Cc: Maarten Broekman
Subject: Re: [clamav-users] Scan very slow
We've noticed a marked increase in scan times over the last couple of weeks as
well. From the look of it, there's something in the daily file that's causing
it. Whether thi
Very interesting.
Do you think we should make a bug-report?
Regards
De : Maarten Broekman
Envoyé : lundi 18 mars 2019 15:14
À : ClamAV users ML
Objet : Re: [clamav-users] Scan very slow
We've noticed a marked increase in scan times over the last couple of weeks as
well. Fro
canned files: 1
Infected files: 0
Data scanned: 0.00 MB
Data read: 0.00 MB (ratio 0.00:1)
Time: 9.300 sec (0 m 9 s)
real0m9.329s
user0m9.100s
sys0m0.204s
On Mon, Mar 18, 2019 at 10:02 AM Yasuhiro KIMURA wrote:
> From: Jean-Michel via clamav-users
> Subject: Re: [clamav-users]
Jean-Michel,
Le 18/03/2019 à 14:55, Jean-Michel via clamav-users a écrit :
Hello,
Thanks for your feedback.
Indeed, there are many elements in this file.
It is surprising that the analysis is so long. I tested the file with 6
other antivirus (paid), the analysis lasts less than one second.
That
From: Jean-Michel via clamav-users
Subject: Re: [clamav-users] Scan very slow
Date: Mon, 18 Mar 2019 12:30:49 +0100
> Isn't it the second scan result ? The second analyse on same file is faster.
> Could tou try to restart clamav-daemon and re-do the analyse with clamdscan.
> I&#x
items in this PDF file" in order to reduce the analysis time?
Regards,
JME
-Message d'origine-
De : Arnaud Jacques
Envoyé : lundi 18 mars 2019 13:08
À : ClamAV users ML
Cc : jmed...@amv-sa.fr
Objet : Re: [clamav-users] Scan very slow
Hello,
> Did you have the same problem
Hello,
Did you have the same problem ?
Is there not a bug ?
Seems same here :
clamdscan -m --fdpass *
/tmp/esploso_A3TH.pdf: OK
--- SCAN SUMMARY ---
Infected files: 0
Time: 59.406 sec (0 m 59 s)
Using clamscan --debug shows there is a LOT of embedded items in this
PDF file
-sa.fr
Envoyé : lundi 18 mars 2019 11:38
À : clamav-users@lists.clamav.net
Objet : [clamav-users] Scan very slow
Hi,
Since some weeks, my clamav (0.100.2+dfsg-0+deb9u1) on Debian 9 64b is very
slow for scanning some files.
It seems that this concerns PDF files. We have this problem with a lot
From: Jean-Michel via clamav-users
Subject: [clamav-users] Scan very slow
Date: Mon, 18 Mar 2019 11:38:00 +0100
> Did you have the same problem ?
> Is there not a bug ?
H/W(VirtualHost):
CPU: Intel Xeon E312xx (Sandy Bridge) x6
Mem: 8GB
OS: Debian 9.8 amd64
ClamAV: 0.100.2+dfsg-0+
30 matches
Mail list logo
