OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: McAffee vs Sophos

From: Graham Hillstomer (ghillstomerpostmaster.co.uk)
Date: Tue Apr 01 2003 - 05:13:25 CST


Yes, this is the case with larger files. I observed the same occurances. I think this holds true for other command line scanners also not just uvscan. Vexira, Trend, and others are faster once loaded. Also, this is dependent on how you have SAVI configured though but generally I have to agree with you.

I am not comfortable with Amavis-new and large scale scanning but that is my opinion :-)

Graham

>
Slightly off topic...

I'm benchtesting postfix (2.0.7) with amavisd (Latest) and two virus
scanners (Sophos using the SAVI and uvscan). Although initially sophos
looks like it absolutely kills uvscan for performance (23ms vs ~1100ms
for a 5k file, timings are from amavisd's TIMING log entry) when the
file sizes start going up, uvscan starts to regain some of the lead, and
at 1.7MB uvscan is actually about 10% faster than sophos SAVI...

Has anyone else seen figures like this? Suggesting that uvscan is
actually quicker than Sophos for large files?

TIA

Hamish

--

I don't suffer from Insanity... | Linux User #16396
        I enjoy every minute of it... |
                                        |
http://www.travellingkiwi.com/ |

--
---
Graham Hillstomer II
Senior System Admin *BSD, HP-UX, Solaris
Quality of Service Response Team
Antivirus Solution Manager / SPAM Control Team Assistant
ghillstomerpostmaster.co.uk