[Bug 289830] New: Clamav from 0.90.3 take long time and cpu to give result

newer
[Bug 290670] New: SuSE Packaging...

older
[Bug 292376] New: Release notes...

bugzilla_noreply＠novell.com

5 Jul 2007 5 Jul '07

17:46

https://bugzilla.novell.com/show_bug.cgi?id=289830 Summary: Clamav from 0.90.3 take long time and cpu to give result Product: SUSE Linux 10.1 Version: Final Platform: i686 OS/Version: SuSE Linux 10.1 Status: NEW Severity: Critical Priority: P5 - None Component: Other AssignedTo: bnc-team-screening@forge.provo.novell.com ReportedBy: brunofr@ioda.net QAContact: qa@suse.de Found By: System Test

...

From the last update of clamav there's an incredible increase time consumed for every scan.

Take any file contaning a virus a test it with : ClamAV 0.90.3/3604/Thu Jul 5 12:33:34 2007 virus-20070702-053818-16131-01: Trojan.Downloader-2389 FOUND ----------- SCAN SUMMARY ----------- Known viruses: 132878 Engine version: 0.90.3 Scanned directories: 0 Scanned files: 1 Infected files: 1 Data scanned: 0.00 MB Time: 36.499 sec (0 m 36 s) file is only 6545 bits long ... same file scanned by f-prot for example took only 0.2 sec. It's particulary critical on all mail serveur using amavisd ... Have found the same penality under debian-volatile packages if it could facilited the research orientation. Seen same also on openSUSE 10.2 -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Show replies by date

bugzilla_noreply＠novell.com

9 Jul 9 Jul

13:20

New subject: [Bug 289830] Clamav from 0.90.3 take long time and cpu to give result

https://bugzilla.novell.com/show_bug.cgi?id=289830 Matej Horvath changed: What |Removed |Added ---------------------------------------------------------------------------- AssignedTo|bnc-team- |max@novell.com |screening@forge.provo.novell| |.com | -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

bugzilla_noreply＠novell.com

16:21

New subject: [Bug 289830] Clamav from 0.90.3 take long time and cpu to give result

https://bugzilla.novell.com/show_bug.cgi?id=289830#c1 Reinhard Max changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution| |FIXED --- Comment #1 from Reinhard Max 2007-07-09 10:21:32 MST --- This bug has already been reported to the ClamAV team and they have fixed it for the next release: https://wwws.clamav.net/bugzilla/show_bug.cgi?id=564 According to that bug report it is not the actual scanning time that has increased, but the time it takes at startup to load the virus database. Mail servers are highly advised to run ClamAV in daemon mode (clamd) instead of launching a new clamscan process for every single email that needs to be scanned. That way they don't have to load the virus database over and over again, which allows for much better throughput even without the pressence of a bug like this. On a Duron 1300 based test machine, scanning a 7kB file with clamscan took 90 seconds while scanning the same file with clamdscan only took a few milliseconds. So, I think this fix can wait until the next version of ClamAV gets released, which I expect to be not that far down the road. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

bugzilla_noreply＠novell.com

18:41

New subject: [Bug 289830] Clamav from 0.90.3 take long time and cpu to give result

https://bugzilla.novell.com/show_bug.cgi?id=289830#c2 Bruno Friedmann changed: What |Removed |Added ---------------------------------------------------------------------------- Resolution|FIXED |INVALID --- Comment #2 from Bruno Friedmann 2007-07-09 12:41:27 MST --- Ok for waiting but as mentionned on many mailling list and report bugs, it's not a solution to say ok our boat is taking water, wait until tomorrow if it's magically stop ... So please leave this open, because for the moment it's not resolve, and it's a killing function. Not only my mail server is concern. For example klamav use by many end user is horribly slow, also is crossover from codewaver which scan .exe before launching. And a last word is ok to use clamd but how can I have clamd running under multiples identity (one for amavis, one for samba, one for and so on ... ) So this bug will stay open until clamav will be repacked and running normally. I don't know if their RC will become quickly a stable release, it could take many weeks. (last stable version is already one month old) If we don't do so, it's a killing point of usability and just a proof that the only goal is closing bug as soon they are open and I'm pretty sure that's not the way Novell want to follow. Ok just admit we got a trouble on this, take time to fix it, and only after we can close the opened bug. Sincerly. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

bugzilla_noreply＠novell.com

11 Jul 11 Jul

12:49

New subject: [Bug 289830] Clamav from 0.90.3 take long time and cpu to give result

https://bugzilla.novell.com/show_bug.cgi?id=289830#c3 Reinhard Max changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |security-team@suse.de Status|RESOLVED |REOPENED Resolution|INVALID | --- Comment #3 from Reinhard Max 2007-07-11 06:49:27 MST --- (In reply to comment #2 from Bruno Friedmann)

...

[...] it's not a solution to say ok our boat is taking water, wait until tomorrow if it's magically stop ...

Well, in this case it turned out to be right thing to do, because ClamAV 0.91 was released last night ;) -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.