[clamav-users] clamonacc loop

[G.W. Haywood]

Hi there,

On Wed, 11 Dec 2019, Frans de Boer wrote:

> - I did excluded the whole boinc directory, but still it gets scanned by 
> clamonacc.

I think I remember that there was an issue with unwanted scans which
was mentioned in posts on this list very recently, have you searched
the archives for other posts about on-access scanning?

> - Every 4-6 hours I scan if there are new files in various repositories 
> and one machine is used as a NAS, to serve all kind of devices, 
> including Windows systems. I have thus also the obligation to protect 
> those users form malware, using a online malware scanner.

In my opinion, in that sort of situation simply scanning with ClamAV
is not adequate.  You need more than one form of malware protection.

> The 0.101 series and before had extrascanning enabled - it worked in the 
> past ...

I agree that for NAS applications it seems better to scan on writing
the files to the storage rather than just when reading them.  Do you
mean that the OnAccessExtraScanning option no longer works?  Do you
have Dynamic Directory Determination enabled (OnAccessDisableDDD=no)?
Perhaps you should post your full clamd.conf file.

> ... at some memory cost.

What was the memory cost?  Do you have measurments of the various
contributions to memory consumption from the ClamAV utilities?  Do
you monitor memory consumption in some way, such as Nagios/Icinga?

-- 

73,
Ged.