Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 28 Feb 2007 16:59:13 +0100
From:      Marko Lerota <mlerota@iskon.hr>
To:        Martin Blapp <mb@imp.ch>
Cc:        freebsd-stable@freebsd.org
Subject:   Re: Clamav-90_2 Lockup with freebsd 6.2
Message-ID:  <867iu2gtny.fsf@sparrow.local>
In-Reply-To: <20070227183553.B18301@godot.imp.ch> (Martin Blapp's message of "Tue, 27 Feb 2007 18:36:42 %2B0100 (CET)")
References:  <003701c75a03$fb478ac0$d801a8c0@dimuthu> <200702270305.l1R35MX2067221@lava.sentex.ca> <20070227035603.GA49430@tmn.ru> <20070227183553.B18301@godot.imp.ch>

next in thread | previous in thread | raw e-mail | index | archive | help
Martin Blapp <mb@imp.ch> writes:

> Even with libthr the CPU usage is still far too high ...
> I'm currently looking at the code.

Take a look at this post. I also have CPU usage problems and simscan 
installed. 

http://www.mail-archive.com/toaster@shupp.org/msg04119.html

> Re: [toaster] clamav 0.90 patches up

> Tom Collins
> Fri, 16 Feb 2007 11:33:52 -0800

> On Feb 15, 2007, at 2:12 PM, Rick Macdougall wrote:

>>  One thing to keep in mind, if you are not using the :attach in simcontrol, 
>> do NOT enable rip mime in simscan as that will cause clamdscan to basically 
>> scan the message and the attachment twice.

>>  Clamav does a very good job of scanning encoded content and attachments 
>> all by itself. No need to duplicate effort. 

> I recently took a look at ripmime to see if it had a setting that would simply 
> dump the attachment filenames without actually creating the attachments. It, 
> unfortunately, does not. I haven't looked at the source to see if it would be 
> possible to build a modified version to accomplish my goals or not.

> I guess I could modify my simscan to run ripmime, look at the attachment 
> filenames, and then delete them all before calling clamav. OR, I could 
> simply pass the message file to clamav instead of having it scan the 
> entire directory.

> In the case of large attachments, it's a big waste of CPU cycles to scan 
> the entire message twice. I might just skip attachment blocking at this point, 
> and hope that clamav will catch all of the scr and pif crap.

-- 
One cannot sell the earth upon which the people walk
                               			Tacunka Witco 



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?867iu2gtny.fsf>