[Mimedefang] clamdscan vs clamd under mimedefang

[Jon R. Kibler]

Hello all:

Question: Why not run clamdscan instead of clamd under mimedefang? 

Observations:
  1) clamdscan appears to always be at least 2 orders of magnitude faster than clamscan.
  2) mimedefang running clamdscan does not appear to be significantly faster than mimedefang using clamd via clamd's socket (within the limits of the experiments I could run).
  3) the setup to run clamdscan under mimedefang is trivial (change references to clamscan to be clamdscan) compared to the setup to run clamd (running under a different user, getting freshclam to notify it of database updates, etc.)

Which brings up another question: Why even offer clamscan as a mimedefang option -- why not just always use clamdscan?

Your thoughts please...

Jon R. Kibler
Chief Technical Officer
A.S.E.T., Inc.
Charleston, SC  USA
(843) 849-8214




==================================================
Filtered by: TRUSTEM.COM's Email Filtering Service
http://www.trustem.com/
No Spam. No Viruses. Just Good Clean Email.