[clamav-users] Radically Different Scan Times

[Al Varnell]

Addressed earlier today:

<https://lists.clamav.net/pipermail/clamav-users/2019-April/007878.html <https://lists.clamav.net/pipermail/clamav-users/2019-April/007878.html>>

-Al-

> On Apr 5, 2019, at 20:18, Michael Newman via clamav-users <clamav-users at lists.clamav.net> wrote:
> 
> MacOS 10.14.4 - 2017 iMac
> ClamAV 0.101.1 (Updated today: ClamAV 0.101.2/25410/Fri Apr  5 14:58:26 2019)
> 
> Yesterday’s results:
> 
> ----------- SCAN SUMMARY -----------
> Known viruses: 6101439
> Engine version: 0.101.1
> Scanned directories: 227591
> Scanned files: 594694
> Infected files: 1
> Total errors: 35
> Data scanned: 63016.47 MB
> Data read: 92969.95 MB (ratio 0.68:1)
> Time: 12755.457 sec (212 m 35 s)
> 
> Today’s results:
> 
> ----------- SCAN SUMMARY -----------
> Known viruses: 6110476
> Engine version: 0.101.1
> Scanned directories: 227492
> Scanned files: 592573
> Infected files: 1
> Total errors: 35
> Data scanned: 63134.07 MB
> Data read: 93149.45 MB (ratio 0.68:1)
> Time: 36218.816 sec (603 m 38 s)
> 
> (Note that the "infected file" is the Eicar-Test-Signature.)
> 
> Even though the number of files and amount of data scanned is about the same, the scan took almost three times as long. I’ve never seen this before. Normally the scan results are there when I wake up in the morning. But, not today.
> 
> I have no idea what to look for here. I’ve not changed anything about the scan nor were other IO intensive jobs running overnight.
> 
> Any suggestions?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.clamav.net/pipermail/clamav-users/attachments/20190405/0045bbb3/attachment.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 3907 bytes
Desc: not available
URL: <https://lists.clamav.net/pipermail/clamav-users/attachments/20190405/0045bbb3/attachment.bin>