[clamav-users] Slow reload

Joel Esler (jesler) jesler at cisco.com
Wed Mar 20 07:55:50 EDT 2019


All these times, I would imagine, would be based on the amount of CPU and RAM, even disk read speed, available to the machine loading.  So these times are relative.  

Sent from my  iPhone

> On Mar 20, 2019, at 07:48, Steve Basford <steveb_clamav at sanesecurity.com> wrote:
> 
>> On 2019-03-19 14:35, Bowie Bailey wrote:
>> 
>> I do have a bunch of third party signatures installed from Sanesecurity and
>> SecuriteInfo.  Is there a way to get timing information on which
>> signature files are
>> taking the longest to load?  Or is this mainly a function of file size?
> 
> Here's a quick sorted output of scanning each database with 1 file to test db loading and scan times....
> 
> eg.
> 
> clamscan --database=xxxxx.xxx
> 
> 
> Sanesecurity:
> 
> MiscreantPunch099-Low.ldb           Execution time  10.534 s
> phish.ndb                           Execution time  4.400 s
> scamnailer.ndb                      Execution time  4.070 s
> junk.ndb                            Execution time  1.840 s
> spear.ndb                           Execution time  1.610 s
> blurl.ndb                           Execution time  1.387 s
> scam.ndb                            Execution time  1.292 s
> phishtank.ndb                       Execution time  1.124 s
> jurlbl.ndb                          Execution time  1.062 s
> winnow_extended_malware.hdb         Execution time  1.017 s
> foxhole_filename.cdb                Execution time  1.013 s
> MiscreantPunch099-INFO-Low.ldb      Execution time  1.007 s
> porcupine.ndb                       Execution time  0.990 s
> jurlbla.ndb                         Execution time  0.974 s
> doppelstern.hdb                     Execution time  0.953 s
> doppelstern-phishtank.ndb           Execution time  0.945 s
> rogue.hdb                           Execution time  0.945 s
> foxhole_all.ndb                     Execution time  0.937 s
> foxhole_js.ndb                      Execution time  0.932 s
> foxhole_generic.cdb                 Execution time  0.931 s
> bofhland_malware_URL.ndb            Execution time  0.930 s
> winnow.complex.patterns.ldb         Execution time  0.928 s
> winnow_phish_complete_url.ndb       Execution time  0.926 s
> foxhole_all.cdb                     Execution time  0.922 s
> lott.ndb                            Execution time  0.919 s
> malware.expert.ndb                  Execution time  0.919 s
> bofhland_cracked_URL.ndb            Execution time  0.917 s
> foxhole_mail.cdb                    Execution time  0.917 s
> winnow_malware.hdb                  Execution time  0.917 s
> winnow.attachments.hdb              Execution time  0.916 s
> winnow_bad_cw.hdb                   Execution time  0.916 s
> crdfam.clamav.hdb                   Execution time  0.915 s
> winnow_extended_malware_links.ndb   Execution time  0.915 s
> spearl.ndb                          Execution time  0.914 s
> badmacro.ndb                        Execution time  0.913 s
> foxhole_js.cdb                      Execution time  0.913 s
> winnow_malware_links.ndb            Execution time  0.913 s
> winnow_spam_complete.ndb            Execution time  0.911 s
> bofhland_phishing_URL.ndb           Execution time  0.910 s
> malware.expert.ldb                  Execution time  0.910 s
> bofhland_malware_attach.hdb         Execution time  0.909 s
> doppelstern.ndb                     Execution time  0.909 s
> winnow_phish_complete.ndb           Execution time  0.908 s
> shelter.ldb                         Execution time  0.907 s
> spamattach.hdb                      Execution time  0.905 s
> spamimg.hdb                         Execution time  0.896 s
> malware.expert.hdb                  Execution time  0.895 s
> spam.ldb                            Execution time  0.889 s
> 
> and the same setup for ClamAV Official DB's:
> 
> daily.ldb     Execution time    35.893 s
> main.mdb      Execution time    13.474 s
> daily.hsb     Execution time    10.514 s
> daily.hdb     Execution time    3.533 s
> main.ndb      Execution time    2.676 s
> main.hsb      Execution time    2.020 s
> daily.mdb     Execution time    1.610 s
> main.hdb      Execution time    1.054 s
> daily.ndb     Execution time    0.983 s
> daily.pdb     Execution time    0.946 s
> daily.ldu     Execution time    0.942 s
> daily.idb     Execution time    0.940 s
> daily.ign2    Execution time    0.937 s
> daily.ign     Execution time    0.930 s
> daily.fp      Execution time    0.921 s
> daily.wdb     Execution time    0.919 s
> daily.ftm     Execution time    0.918 s
> main.sfp      Execution time    0.914 s
> daily.hsu     Execution time    0.911 s
> daily.sfp     Execution time    0.910 s
> daily.cfg     Execution time    0.909 s
> daily.crb     Execution time    0.907 s
> daily.msu     Execution time    0.906 s
> daily.hdu     Execution time    0.902 s
> daily.msb     Execution time    0.902 s
> daily.ndu     Execution time    0.902 s
> daily.cdb     Execution time    0.901 s
> main.msb      Execution time    0.896 s
> main.crb      Execution time    0.894 s
> main.fp       Execution time    0.891 s
> daily.mdu     Execution time    0.889 s
> 
> Just in case that's useful for anyone ;)
> 
> -- 
> Cheers,
> 
> Steve
> Twitter: @sanesecurity
> 
> _______________________________________________
> 
> clamav-users mailing list
> clamav-users at lists.clamav.net
> https://lists.clamav.net/mailman/listinfo/clamav-users
> 
> 
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
> 
> http://www.clamav.net/contact.html#ml
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 3010 bytes
Desc: not available
URL: <https://lists.clamav.net/pipermail/clamav-users/attachments/20190320/3bf19f97/attachment.bin>


More information about the clamav-users mailing list