On Jul 3, 2018, at 4:50 PM, Benny Pedersen <me@junc.eu> wrote:

Joel Esler (jesler) skrev den 2018-07-03 22:42:

Yes.  But measuring those numbers is the difficult part.  A fresh
install of ClamAV is going to download the main, the daily, then all
the diffs since the last daily, which could be a ton.  It's the people
that are downloading the *same* diff 1000x an hour that are the
problem.

could this be solved in freshclam

maxdiffupdates 50 # number of diff to max update at once
minimalrechecktime 60 # minimal minutes before next recheck new diff updates

adjust as needed

would that atleast settle it a bit ?

Everything helps!  Lowers bandwidth costs!

--
Joel Esler
Sr. Manager
Open Source, Design, Web, and Education
Talos Group
http://www.talosintelligence.com