[clamav-users] ClamAV Scanning Best Practice

[Shoaib, Syed]

Hello All,

We have started using ClamAV for SUSE Linux servers in one of our project. I have a few points that needs clarification w.r.t Antivirus best practices.


  1.  How frequently is it recommended to perform complete scan (clamscan) on servers. From my testing I understand that each scan on a server takes about 5-7 hours. Is it recommended to scan Linux servers daily or weekly basis?
  2.  Will there be a performance impact on servers when the scan is running for such long hours?
  3.  We have planned to write a  script which automates the scanning of servers i.e.

  *   run clamscan command and share its output by email
  *   Drop clamscan output on the terminal
  *   Ex: clamscan -r / -i <this command scans all files, directories and prints only infected files>
             While testing the above command, infected files and also error messages are printed.
              Is there a better command to scan the entire system, and just show the scan summary rather than printing error messages.

Regards,
SS

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.clamav.net/pipermail/clamav-users/attachments/20200820/32660bc2/attachment.htm>