On Sunday 21 August 2005 01:53 am, jdow wrote:
> > Wow! That was as easy to setup as falling off a log. Thanks for the tip
> > Matt,
> > works great.
>
> I noticed the ClamAV scan almost doubles the time for an SA scan on
> virus free mail. On a virus sample I happen to have around it goes uo
> from 4.5 seconds to 35 seconds to scan the message. Is this "normal?"
>
> {^_^}
Doesn't appear to be consistant:
Aug 20 23:26:21 cpollock named[3444]: unexpected RCODE (SERVFAIL) resolving
'78.171.93.202.list.dsbl.org/TXT/IN': 64.39.29.212#53
SelfCheck: Database status OK.
Aug 20 23:27:41 cpollock clamd[5314]: SelfCheck: Database status OK.
Accepted connection on port 1563, fd 8
Aug 20 23:27:41 cpollock clamd[5314]: Accepted connection on port 1563, fd 8
stream: Worm.Mydoom.AT FOUND
Aug 20 23:27:41 cpollock clamd[5314]: stream: Worm.Mydoom.AT FOUND
Aug 20 23:27:42 cpollock spamd[9060]: identified spam (24.0/5.0) for chris:501
in 82.2 seconds, 109343 bytes.
Aug 21 01:03:49 cpollock spamd[14980]: processing message
<[EMAIL PROTECTED]> for chris:501.
Accepted connection on port 1473, fd 8
Aug 21 01:03:51 cpollock clamd[5314]: Accepted connection on port 1473, fd 8
stream: Worm.Mydoom.AT FOUND
Aug 21 01:03:52 cpollock clamd[5314]: stream: Worm.Mydoom.AT FOUND
Aug 21 01:03:55 cpollock spamd[14980]: identified spam (33.9/5.0) for
chris:501 in 6.3 seconds, 109333 bytes.
Aug 21 08:19:42 cpollock spamd[24892]: processing message
<[EMAIL PROTECTED]> for chris:501.
Aug 21 08:19:45 cpollock clamd[5314]: Accepted connection on port 1140, fd 8
Aug 21 08:19:46 cpollock clamd[5314]: stream: Worm.Mydoom.AT FOUND
Aug 21 08:19:46 cpollock spamd[24892]: identified spam (14.4/5.0) for
chris:501 in 3.9 seconds, 109372 bytes.
There must be other variables involved to account for the long SA scan time.
--
Chris
Registered Linux User 283774 http://counter.li.org
09:21:01 up 17 days, 17:57, 1 user, load average: 0.23, 0.23, 0.34
Mandriva Linux 10.1 Official, kernel 2.6.8.1-12mdk
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
If you think you're wrong
-- Murphy's Laws for School Administrators n°3
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
