Discussion:
[clamav-users] ClamAV benchmarking
Jose Kalladanthyil
2018-09-05 09:06:22 UTC
Permalink
Hi,
I have been doing some benchmarking on ClamAv to workout the ideal configuration
to get the fasted scan time. I am seeing quite a varied results from the
experiment. After running the scan multiple times on one particular zip file (25mb)
I am seeing (Duration in SEC): 59, 40, 164, 39, 124.
These results are with the configuration ScanArchive set to false.

However for larger mp4 files and doc files the timing is much smaller.
For example 150mb mp4 takes less than a second by 60mb doc takes 18 seconds.
We are running av on linux vm with 4gb ram.
Any advice on what config values to change would be much appreciated.

Jose

Jose Kalladanthyil | Developer
Huddle – Transform the way you work!

***@huddle.com | T: +44 (0)8709 772 212



Ninian Solutions Ltd (trading as Huddle) is registered in England & Wales at Aldgate Tower, 2 Leman Street, London, UK (company number 05777111) and its U.S subsidiary Huddle Inc., a Delaware Corporation, at 156 2nd Street, San Francisco, CA, U.S.
Al Varnell
2018-09-05 09:19:17 UTC
Permalink
Well, for one thing the default maximum file size is normally set to 100MB, so files larger than that will simply be size checked and ignored.

-Al-
Post by Jose Kalladanthyil
Hi,
I have been doing some benchmarking on ClamAv to workout the ideal configuration
to get the fasted scan time. I am seeing quite a varied results from the
experiment. After running the scan multiple times on one particular zip file (25mb)
I am seeing (Duration in SEC): 59, 40, 164, 39, 124.
These results are with the configuration ScanArchive set to false.
However for larger mp4 files and doc files the timing is much smaller.
For example 150mb mp4 takes less than a second by 60mb doc takes 18 seconds.
We are running av on linux vm with 4gb ram.
Any advice on what config values to change would be much appreciated.
Jose
Jose Kalladanthyil | Developer
Huddle – Transform the way you work!
G.W. Haywood
2018-09-05 17:18:40 UTC
Permalink
Hi there,
Post by Jose Kalladanthyil
I have been doing some benchmarking on ClamAv to workout the ideal
configuration to get the fasted scan time.
While you're doing that, you might also want to test detection
efficiency, or at least read the list archives.
--
73,
Ged.
_______________________________________________
clamav-users mailing list
clamav-***@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml
Continue reading on narkive:
Loading...