Guest User!

You are not Sophos Staff.

Question about Sophos Protection for Linux: Anti-Virus plugin

Hello,
I would like to know if the avscanner scanning utility (from the command line) loads the virus definitions with each scan or if they are resident in memory (as in the case of the former SAVDI).
I ask this because the scanning speed is high compared to, for example, Clamav.
Clamav 1.0.0 is unusable from this point of view and the alternative is the new Sophos Protection for Linux.



Added TAGs
[edited by: Gladys at 3:34 AM (GMT -8) on 20 Dec 2022]
Parents
  • Hello Teoberi,

    Thank you for reaching the community forum.

    SPL command line scan loads the virus definitions into memory, and when it starts, they remain available in memory for 1 hour, so any successive scans that are run - either on demand OR scheduled will also use them. If they remain unused for more than an hour, then they’ll be released pending the next time they’re needed

    Glenn ArchieSeñas (GlennSen)
    Global Community Support Engineer | Global Community and Digital Customer Support
    Connect, Engage, Earn Rewards - Join the Sophos Community
Reply
  • Hello Teoberi,

    Thank you for reaching the community forum.

    SPL command line scan loads the virus definitions into memory, and when it starts, they remain available in memory for 1 hour, so any successive scans that are run - either on demand OR scheduled will also use them. If they remain unused for more than an hour, then they’ll be released pending the next time they’re needed

    Glenn ArchieSeñas (GlennSen)
    Global Community Support Engineer | Global Community and Digital Customer Support
    Connect, Engage, Earn Rewards - Join the Sophos Community
Children