[clamav-users] How to boost clamav? Reloading database results in a talking timeout?

[Matus UHLAR - fantomas]

>> >>On Fri, 6 Sep 2019, Reio Remma via clamav-users wrote:
>> >>>I guess many of us are just running too old hardware. :)
>> >>>
>> >>>Here's a comparison between my mail server and identical config
>> >>>running in a VM.
>> >>>
>> >>>Sep  6 09:41:06 mail clamd[31441]: Reading databases from
>> >>>/var/lib/clamav
>> >>>Sep  6 09:44:05 mail clamd[31441]: Database correctly reloaded
>> >>>(10741767 ...
>> >>>
>> >>>Sep  6 09:56:43 vm clamd[2108]: Reading databases from /var/lib/clamav
>> >>>Sep  6 09:57:17 vm clamd[2108]: Database correctly reloaded (10742128 ...

>On Fri, 6 Sep 2019, Matus UHLAR - fantomas wrote:
>> Fri Sep  6 08:49:08 2019 -> Reading databases from /var/lib/clamav
>> Fri Sep  6 08:50:18 2019 -> Database correctly reloaded (8830356 signatures)
>> Fri Sep  6 09:48:25 2019 -> Reading databases from /var/lib/clamav
>> Fri Sep  6 09:49:49 2019 -> Database correctly reloaded (8830677 signatures)
>> Fri Sep  6 10:47:36 2019 -> Reading databases from /var/lib/clamav
>> Fri Sep  6 10:48:53 2019 -> Database correctly reloaded (8830954 signatures)
>>
>> average ~1:20 on X3440 CPU (10 years old).

On 07.09.19 21:03, Robert M. Stockmann via clamav-users wrote:
>I notice that the above clamd configuration is reloading the clamav
>databases every hour, but thats not how its supposed to work. My
>configuration only attempts a reload when actually new .cvd updates are
>received :

If you read the logs carefully, you'd notice that there's different number
of signatures, thus, the database did change.

That's not the poing.

>> >On 06/09/2019 11:31, G.W. Haywood wrote:
>> >>That's very useful, thanks.  Can you compare the costs of running
>> >>them for us?
>>
>> On 06.09.19 11:54, Reio Remma via clamav-users wrote:
>> >I suspect the i9-9900 is cheaper to actually run than the old
>> >whichever Core is in the mail server. :D
>>
>> I think that virtual/cloud server has to be cheaper than power usage of the
>> existing server (plus housing, if you pay for that one).

>Why everyone needs two minutes for this task, independent from which
>hardware is used, is a puzzle to me. Anyone who has the clamd .cvd
>files loaded on a fast SSD storage ?

I think it needs fast CPU, that's why it takes time.
all the signatures have to be parsed and indexed in memory and that's huge
number of signatures.

-- 
Matus UHLAR - fantomas, uhlar at fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
WinError #98652: Operation completed successfully.