Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 3 replies
  • Subscribers 1 subscriber
  • Views 12176 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos Anti-Virus - On Access Cache Scanning functionality

LoXodonte

Performance related and functionality inquiry here...  Does Sophos AV use a cache to keep a record of on-access scans so it knows not to re-scan certain content. If so, what is the criteria for when a file will be scanned again?

Trying to troubleshoot some performance issues  related to a .NETframework app...sometimes the application startup takes 30+ seconds on a cold-boot. I've confirmed that SavService.exe is hitting the C:\Windows\assembly\NativeImages_v4.0... and C:\Windows\Microsoft.NET...locations hard in these instances.

:56686


This thread was automatically locked due to age.
Parents
  • 0

    Hello LoXodonte,

    it "always" had an in-memory cache, since 10.3 it's backed up to the AV\Config directory to preserve it when the service restarts. Can't say though if a cold boot invalidates the cache. AFAIK a file is first checked if its type is eligible for scanning, if yes then the file is "fingerprinted", and if not known subsequently scanned. Furthermore the cache size is bounded. That's about all I can say.

    Christian   

    :56700
Reply
  • 0

    Hello LoXodonte,

    it "always" had an in-memory cache, since 10.3 it's backed up to the AV\Config directory to preserve it when the service restarts. Can't say though if a cold boot invalidates the cache. AFAIK a file is first checked if its type is eligible for scanning, if yes then the file is "fingerprinted", and if not known subsequently scanned. Furthermore the cache size is bounded. That's about all I can say.

    Christian   

    :56700
Children
No Data
Cookie Information Banner