[clamav-users] Slow reload
Joel Esler (jesler)
jesler at cisco.com
Wed Mar 20 11:55:50 UTC 2019
All these times, I would imagine, would be based on the amount of CPU and RAM, even disk read speed, available to the machine loading. So these times are relative.
Sent from my iPhone
> On Mar 20, 2019, at 07:48, Steve Basford <steveb_clamav at sanesecurity.com> wrote:
>
>> On 2019-03-19 14:35, Bowie Bailey wrote:
>>
>> I do have a bunch of third party signatures installed from Sanesecurity and
>> SecuriteInfo. Is there a way to get timing information on which
>> signature files are
>> taking the longest to load? Or is this mainly a function of file size?
>
> Here's a quick sorted output of scanning each database with 1 file to test db loading and scan times....
>
> eg.
>
> clamscan --database=xxxxx.xxx
>
>
> Sanesecurity:
>
> MiscreantPunch099-Low.ldb Execution time 10.534 s
> phish.ndb Execution time 4.400 s
> scamnailer.ndb Execution time 4.070 s
> junk.ndb Execution time 1.840 s
> spear.ndb Execution time 1.610 s
> blurl.ndb Execution time 1.387 s
> scam.ndb Execution time 1.292 s
> phishtank.ndb Execution time 1.124 s
> jurlbl.ndb Execution time 1.062 s
> winnow_extended_malware.hdb Execution time 1.017 s
> foxhole_filename.cdb Execution time 1.013 s
> MiscreantPunch099-INFO-Low.ldb Execution time 1.007 s
> porcupine.ndb Execution time 0.990 s
> jurlbla.ndb Execution time 0.974 s
> doppelstern.hdb Execution time 0.953 s
> doppelstern-phishtank.ndb Execution time 0.945 s
> rogue.hdb Execution time 0.945 s
> foxhole_all.ndb Execution time 0.937 s
> foxhole_js.ndb Execution time 0.932 s
> foxhole_generic.cdb Execution time 0.931 s
> bofhland_malware_URL.ndb Execution time 0.930 s
> winnow.complex.patterns.ldb Execution time 0.928 s
> winnow_phish_complete_url.ndb Execution time 0.926 s
> foxhole_all.cdb Execution time 0.922 s
> lott.ndb Execution time 0.919 s
> malware.expert.ndb Execution time 0.919 s
> bofhland_cracked_URL.ndb Execution time 0.917 s
> foxhole_mail.cdb Execution time 0.917 s
> winnow_malware.hdb Execution time 0.917 s
> winnow.attachments.hdb Execution time 0.916 s
> winnow_bad_cw.hdb Execution time 0.916 s
> crdfam.clamav.hdb Execution time 0.915 s
> winnow_extended_malware_links.ndb Execution time 0.915 s
> spearl.ndb Execution time 0.914 s
> badmacro.ndb Execution time 0.913 s
> foxhole_js.cdb Execution time 0.913 s
> winnow_malware_links.ndb Execution time 0.913 s
> winnow_spam_complete.ndb Execution time 0.911 s
> bofhland_phishing_URL.ndb Execution time 0.910 s
> malware.expert.ldb Execution time 0.910 s
> bofhland_malware_attach.hdb Execution time 0.909 s
> doppelstern.ndb Execution time 0.909 s
> winnow_phish_complete.ndb Execution time 0.908 s
> shelter.ldb Execution time 0.907 s
> spamattach.hdb Execution time 0.905 s
> spamimg.hdb Execution time 0.896 s
> malware.expert.hdb Execution time 0.895 s
> spam.ldb Execution time 0.889 s
>
> and the same setup for ClamAV Official DB's:
>
> daily.ldb Execution time 35.893 s
> main.mdb Execution time 13.474 s
> daily.hsb Execution time 10.514 s
> daily.hdb Execution time 3.533 s
> main.ndb Execution time 2.676 s
> main.hsb Execution time 2.020 s
> daily.mdb Execution time 1.610 s
> main.hdb Execution time 1.054 s
> daily.ndb Execution time 0.983 s
> daily.pdb Execution time 0.946 s
> daily.ldu Execution time 0.942 s
> daily.idb Execution time 0.940 s
> daily.ign2 Execution time 0.937 s
> daily.ign Execution time 0.930 s
> daily.fp Execution time 0.921 s
> daily.wdb Execution time 0.919 s
> daily.ftm Execution time 0.918 s
> main.sfp Execution time 0.914 s
> daily.hsu Execution time 0.911 s
> daily.sfp Execution time 0.910 s
> daily.cfg Execution time 0.909 s
> daily.crb Execution time 0.907 s
> daily.msu Execution time 0.906 s
> daily.hdu Execution time 0.902 s
> daily.msb Execution time 0.902 s
> daily.ndu Execution time 0.902 s
> daily.cdb Execution time 0.901 s
> main.msb Execution time 0.896 s
> main.crb Execution time 0.894 s
> main.fp Execution time 0.891 s
> daily.mdu Execution time 0.889 s
>
> Just in case that's useful for anyone ;)
>
> --
> Cheers,
>
> Steve
> Twitter: @sanesecurity
>
> _______________________________________________
>
> clamav-users mailing list
> clamav-users at lists.clamav.net
> https://lists.clamav.net/mailman/listinfo/clamav-users
>
>
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
>
> http://www.clamav.net/contact.html#ml
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 3010 bytes
Desc: not available
URL: <https://lists.clamav.net/pipermail/clamav-users/attachments/20190320/3bf19f97/attachment.bin>
More information about the clamav-users
mailing list