Re: Difference between clamscan and clamdscan scanning time

Per the docs:

"clamscan is a command line tool which uses libclamav to scan files and/or directories for viruses. Unlike clamdscan, clamscan does not require a running clamd instance to function. Instead, clamscan will create a new engine and load in the virus database each time it is run. It will then scan the files and/or directories specified at the command line, create a scan report, and exit."

https://docs.clamav.net/manual/Usage/Scanning.html#clamscan
On Dec 6, 2024, 10:08 PM -0500, neel roy via clamav-users <[email protected]>, wrote:
> Hello,
>
> I passed 10,000 files listed in the file to clamscan and clamdscan. I see very big difference on 4 cpu bare metal machine. Why is it?
> I am using clamav 1.0.7.
>
> clamscan -f large_files.txt - 3 mins 5 seconds
> clamdscan --fdpass -f large_files.txt - 9 seconds
>
> Notes
> - For clamdscan, I am *not* using -m option.
> - For clamdscan, without "--fdpass" it would give "permission denied" errors.
>
> I understand that first 20-30 seconds or so I see clamscan is loading virus definitions. Even without that, the difference is difference is very big. What accounts for it?
>
> Thanks in advance,
> -Neel.
> _______________________________________________
>
> Manage your clamav-users mailing list subscription / unsubscribe:
> https://lists.clamav.net/mailman/listinfo/clamav-users
>
>
> Help us build a comprehensive ClamAV guide:
> https://github.com/Cisco-Talos/clamav-documentation
>
> https://docs.clamav.net/#mailing-lists-and-chat

_______________________________________________

Manage your clamav-users mailing list subscription / unsubscribe:
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/Cisco-Talos/clamav-documentation

https://docs.clamav.net/#mailing-lists-and-chat