[clamav-users] Keeping the ClamAV process open?

[Tom Judge]

On Sun, Mar 2, 2014 at 10:55 PM, Scott Snow <s_snow2 at u.pacific.edu> wrote:

> I'm working on a MapReduce project using Amazon's EC2. The only bottleneck
> I have is that it takes ~35-40 seconds to scan each file, which seems very
> high. I'm using a c program as a wrapper for ClamAV, which takes a single
> file and the mode. Does anyone know approximately how long it takes to
> initialize ClamAV and load the virus db? Would it be possible to just keep
> the ClamAV process loaded/running? I've been searching quite a bit, but
> haven't found anything so far. If anyone has any other suggestions for
> optimization, that would be appreciated as well. I'm not very familiar with
> ClamAV.
>
>
This all depends on how many signatures you have loaded, it can take
anywhere from 30 seconds to a minute to load the full signature set on a
reasonably spec'd machine.  As Dennis mentioned you should defiantly use
clamd for this work to significantly reduce your overhead.


Tom




> Thanks.
>
> _______________________________________________
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
> http://www.clamav.net/support/ml
>



-- 
Senior Research Engineer
SourceFire Vulnerability Research Team