Re: [clamav-users] Slow reload

2019-03-25 Thread Alessandro Vesely via clamav-users
On Fri 22/Mar/2019 16:14:28 +0100 Bowie Bailey wrote: > On 3/22/2019 10:54 AM, Bowie Bailey wrote: >> >> The only problem I have found is that >> since my databases take so long to load, avfilter_sig times out when >> reloading the >> virus definitions.  Is there a way to increase the timeout

Re: [clamav-users] Slow reload

2019-03-22 Thread Bowie Bailey
On 3/22/2019 10:54 AM, Bowie Bailey wrote: > > The only problem I have found is that > since my databases take so long to load, avfilter_sig times out when > reloading the > virus definitions.  Is there a way to increase the timeout for avfilter_sig? Nevermind.  I updated the hardcoded value in

Re: [clamav-users] Slow reload

2019-03-22 Thread Bowie Bailey
On 3/22/2019 6:58 AM, Alessandro Vesely via clamav-users wrote: > On Thu 21/Mar/2019 21:21:45 +0100 Bowie Bailey wrote: >> >> And here's the problem.  SecuriteInfo has their own Eicar signatures, so >> ClamAV found >> those first and not the one you were expecting.  My header looks like this: >>

Re: [clamav-users] Slow reload

2019-03-21 Thread Bowie Bailey
On 3/21/2019 3:14 PM, Alessandro Vesely via clamav-users wrote: > On Thu 21/Mar/2019 15:05:59 +0100 Bowie Bailey wrote: >> $ pkg-config --atleast-version=0.101.0 libclamav --print-errors >> Package libclamav was not found in the pkg-config search path. >> Perhaps you should add the directory

Re: [clamav-users] Slow reload

2019-03-21 Thread G.W. Haywood via clamav-users
Hi there, On Thu, 21 Mar 2019, J.R. wrote: > The simplest way to achieve this right now would probably be to use > two servers for scanning ... Or just have the mail server send a 'tempfail' and the remote mail server will retry sending usually within 10 minutes... The OP specifically

Re: [clamav-users] Slow reload

2019-03-21 Thread Alessandro Vesely via clamav-users
On Wed 20/Mar/2019 21:52:49 +0100 Bowie Bailey wrote: > > I'm trying to build avfilter, but it is complaining that it can't find > libclamav.  I > have ClamAV 0.101.1 installed (built from source).  I was able to find > libclamav.so > in /usr/local/lib64/.  Do I need to specify that directory

Re: [clamav-users] Slow reload

2019-03-20 Thread J.R. via clamav-users
> The simplest way to achieve this right now would probably be to use > two servers for scanning, and arrange for them to update their DBs > at different times. A simple milter with a knowledge of the update > schedule could choose which scanner to use just by checking the time. > I imagine that

Re: [clamav-users] Slow reload

2019-03-20 Thread Bowie Bailey
On 3/20/2019 3:53 PM, Bowie Bailey wrote: > On 3/20/2019 2:57 PM, Alessandro Vesely via clamav-users wrote: >> On Wed 20/Mar/2019 14:53:28 +0100 Bowie Bailey wrote: >> >>> On 3/20/2019 8:42 AM, Alessandro Vesely via clamav-users wrote: On Tue 19/Mar/2019 15:35:39 +0100 Bowie Bailey wrote:

Re: [clamav-users] Slow reload

2019-03-20 Thread G.W. Haywood via clamav-users
Hi there, On Wed, 20 Mar 2019, Micah Snyder wrote: On 3/20/19, 10:04 AM, "clamav-users on behalf of Bowie Bailey" wrote: On 3/20/2019 8:42 AM, Alessandro Vesely via clamav-users wrote: On Tue 19/Mar/2019 15:35:39 +0100 Bowie Bailey wrote: ClamAV is taking about 2 1/2 minutes to reload its

Re: [clamav-users] Slow reload

2019-03-20 Thread Bowie Bailey
On 3/20/2019 2:57 PM, Alessandro Vesely via clamav-users wrote: > On Wed 20/Mar/2019 14:53:28 +0100 Bowie Bailey wrote: > >> On 3/20/2019 8:42 AM, Alessandro Vesely via clamav-users wrote: >>> On Tue 19/Mar/2019 15:35:39 +0100 Bowie Bailey wrote: >>> ClamAV is taking about 2 1/2 minutes to

Re: [clamav-users] Slow reload

2019-03-20 Thread Alessandro Vesely via clamav-users
On Wed 20/Mar/2019 14:53:28 +0100 Bowie Bailey wrote: > On 3/20/2019 8:42 AM, Alessandro Vesely via clamav-users wrote: >> On Tue 19/Mar/2019 15:35:39 +0100 Bowie Bailey wrote: >> >>> ClamAV is taking about 2 1/2 minutes to reload its database on my mail >>> server.  This >>> seems to frequently

Re: [clamav-users] Slow reload

2019-03-20 Thread Micah Snyder (micasnyd) via clamav-users
I think Alessandro was suggesting how it could work, not how it does work. Clamd doesn't work that way at present. It has been a feature request for a very long time, one that I hope we can address sometime soon, but I don't know when. Micah Micah Snyder ClamAV Development Talos Cisco

Re: [clamav-users] Slow reload

2019-03-20 Thread Bowie Bailey
On 3/20/2019 8:42 AM, Alessandro Vesely via clamav-users wrote: > On Tue 19/Mar/2019 15:35:39 +0100 Bowie Bailey wrote: > >> ClamAV is taking about 2 1/2 minutes to reload its database on my mail >> server.  This >> seems to frequently happen when we are sending an email, so the Thunderbird >>

Re: [clamav-users] Slow reload

2019-03-20 Thread Bowie Bailey
On 3/20/2019 2:57 AM, Arnaud Jacques wrote: > Hello Bowie, > >> I did a check on the SecuriteInfo signatures.  I grepped my clamd logs for >> hits on >> SecuriteInfo signatures and then matched them to the file they came from. >> >> #1 was spam_marketing.ndb with 110 hits >> #2 was javascript.ndb

Re: [clamav-users] Slow reload

2019-03-20 Thread Alessandro Vesely via clamav-users
On Tue 19/Mar/2019 15:35:39 +0100 Bowie Bailey wrote: > ClamAV is taking about 2 1/2 minutes to reload its database on my mail > server.  This > seems to frequently happen when we are sending an email, so the Thunderbird > will time > out on the send (although the message will frequently go

Re: [clamav-users] Slow reload

2019-03-20 Thread Joel Esler (jesler) via clamav-users
All these times, I would imagine, would be based on the amount of CPU and RAM, even disk read speed, available to the machine loading. So these times are relative. Sent from my  iPhone > On Mar 20, 2019, at 07:48, Steve Basford > wrote: > >> On 2019-03-19 14:35, Bowie Bailey wrote: >>

Re: [clamav-users] Slow reload

2019-03-20 Thread Steve Basford
On 2019-03-19 14:35, Bowie Bailey wrote: I do have a bunch of third party signatures installed from Sanesecurity and SecuriteInfo.  Is there a way to get timing information on which signature files are taking the longest to load?  Or is this mainly a function of file size? Here's a quick

Re: [clamav-users] Slow reload

2019-03-20 Thread Arnaud Jacques
Hello Bowie, I did a check on the SecuriteInfo signatures.  I grepped my clamd logs for hits on SecuriteInfo signatures and then matched them to the file they came from. #1 was spam_marketing.ndb with 110 hits #2 was javascript.ndb with 10 hits And that was it.  securiteinfo.hdb,

Re: [clamav-users] Slow reload

2019-03-19 Thread Steve Basford
On 19 March 2019 21:01:03 Bowie Bailey wrote: On 3/19/2019 4:27 PM, Bowie Bailey wrote: Is there a way to get the details on how long each file take to load, or do I just have to test them one by one? A very simple per Database scan time test... Sorry not sorted in time order but might

Re: [clamav-users] Slow reload

2019-03-19 Thread Bowie Bailey
On 3/19/2019 4:27 PM, Bowie Bailey wrote: > On 3/19/2019 10:44 AM, Arnaud Jacques wrote: >> Hello Bowie, >> >> Le 19/03/2019 à 15:35, Bowie Bailey a écrit : >>> ClamAV is taking about 2 1/2 minutes to reload its database on my mail >>> server.  This >>> seems to frequently happen when we are

Re: [clamav-users] Slow reload

2019-03-19 Thread Bowie Bailey
On 3/19/2019 10:44 AM, Arnaud Jacques wrote: > Hello Bowie, > > Le 19/03/2019 à 15:35, Bowie Bailey a écrit : >> ClamAV is taking about 2 1/2 minutes to reload its database on my mail >> server.  This >> seems to frequently happen when we are sending an email, so the Thunderbird >> will time >>

Re: [clamav-users] Slow reload

2019-03-19 Thread Arnaud Jacques
Hello Bowie, Le 19/03/2019 à 15:35, Bowie Bailey a écrit : ClamAV is taking about 2 1/2 minutes to reload its database on my mail server.  This seems to frequently happen when we are sending an email, so the Thunderbird will time out on the send (although the message will frequently go

[clamav-users] Slow reload

2019-03-19 Thread Bowie Bailey
ClamAV is taking about 2 1/2 minutes to reload its database on my mail server.  This seems to frequently happen when we are sending an email, so the Thunderbird will time out on the send (although the message will frequently go through anyway). I do have a bunch of third party signatures