Freshclam load (was RE: [Mimedefang] Poll: Time to drop Trophiesupport?)

Paul Murphy pmurphy at ionixpharma.com
Fri Apr 30 08:06:42 EDT 2004


From an strace of freshclam:

connect(3, {sin_family=AF_INET, sin_port=htons(80), sin_addr=inet_addr("152.66.2
49.132")}}, 16) = 0
write(2, "Reading CVD header (main.cvd): ", 31Reading CVD header (main.cvd): ) =
 31
write(3, "GET /main.cvd HTTP/1.1\r\nHost: da"..., 122) = 122
recv(3, "HTTP/1.1 200 OK\r\nDate: Fri, 30 A"..., 8192, 0) = 1380
recv(3, "\227\34\347\356\26\315\330\3510\35t\301\2662Q,\v\306\270"..., 6812, 0)
= 1380
recv(3, "\2zD\25Gj\331/\266\267Ww\226>\20\345(\351\370\356(Hl\2"..., 5432, 0) =
1380
recv(3, "\320\23\301(x\270\242\206@\356\347\267Q\326\16\v7\305\327"..., 4052, 0)
 = 1380
recv(3, ";\177\357\202F\303\331MF\30\275|!\222\206\223~\267\r\20"..., 2672, 0) =
 1380
recv(3, "s\"\33:y{\262\224\21\343\357\323S\266~s\372\22\353%\307"..., 1292, 0) =
 1292

The use of GET forces the whole file to be pulled - see manager.c, and search
for the "GET" section.

There's also an interesting comment in the code:

/* njh at bandsman.co.uk: added proxy support */
/* TODO: use a HEAD instruction to see if the file has been changed */
int
get_database(const char *dbfile, int socketfd, const char *file, const char *hos
tname, const char *proxy, const char *user)

At least its being thought about...

Best Wishes,

Paul.
__________________________________________________
Paul Murphy
Head of Informatics
Ionix Pharmaceuticals Ltd
418 Science Park, Cambridge, CB4 0PA

Tel. 01223 433741
Fax. 01223 433788


> -----Original Message-----
> From: David F. Skoll [mailto:dfs at roaringpenguin.com] 
> Sent: 30 April 2004 12:27
> To: mimedefang at lists.roaringpenguin.com
> Subject: RE: Freshclam load (was RE: [Mimedefang] Poll: Time 
> to drop Trophiesupport?)
> 
> 
> On Fri, 30 Apr 2004, Paul Murphy wrote:
> 
> > At the moment, freshclam makes a HTTP download on two CVD files,
> > which at the moment are 965Kb and 92Kb.  It does this download
> > whether the file is different or not,
> 
> Are you sure?  I thought it just downloaded small md5sums, and didn't
> bother downloading the file if the md5 sum is correct.
> 
> Regards,
> 
> David.
> _______________________________________________
> Visit http://www.mimedefang.org and http://www.canit.ca
> MIMEDefang mailing list
> MIMEDefang at lists.roaringpenguin.com
> http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
> 

_______________________________________________________________________
DISCLAIMER:
This email and any files transmitted with it are confidential and 
intended solely for the use of the individual or entity to which they
are addressed.  If you have received this email in error please contact
the sender or the Ionix IT Helpdesk on +44 (0) 1223 433741
_______________________________________________________________________ 



More information about the MIMEDefang mailing list