[Avcheck] Re: text message shouldn't be scanned?

[adi]

On Mon, Dec 31, 2001 at 09:19:01PM +0300, Michael Tokarev wrote:
> Next, for the (small) plaintext messages, a virusscanner performs very
> fast too.  I agree that it will be faster to bypass a virus check for
> such a messages, but not significantly faster.

Seems you're right. Using smtp-source shows little differences:

avcheck:
adi:/data/src/snapshot-20011226/src/smtpstone> date && /usr/bin/time
./smtp-source -s 20 -m 100 -l 50000 -f adi -t null postfix
Tue Jan  1 18:52:47 JAVT 2002
0.09user 0.33system 0:10.57elapsed 3%CPU (0avgtext+0avgdata 0maxresident)k
0inputs+0outputs (226major+83minor)pagefaults 0swaps

last syslog message:
Jan  1 18:53:01 home postfix/local[23615]: 2779020205:
to=<null@home.org>, relay=local, delay=3, status=sent (/dev/null)

avnull:
adi:/data/src/snapshot-20011226/src/smtpstone> date && /usr/bin/time
./smtp-source -s 20 -m 100 -l 50000 -f adi -t null postfix
Tue Jan  1 18:54:38 JAVT 2002
0.11user 0.16system 0:11.09elapsed 2%CPU (0avgtext+0avgdata 0maxresident)k
0inputs+0outputs (226major+117minor)pagefaults 0swaps

last syslog message:
Jan  1 18:54:49 home postfix/local[23865]: C00532022D:
to=<null@home.org>, relay=local, delay=3, status=sent (/dev/null)

avnull is modified avcheck, which is simply put 'return 0' before
connecting to AvpDaemon's socket ;-)

Yes, I use old AvpDaemon, because I have no valid key for kavdaemon,
and got no luck with drweb. I download drweb evaluation version from
www.sald.com. Seems they change return values, then avcheck wouldn't
work anymore, while using 'drwebdc' and drweb_postfix.pl script
which are shipped with drweb tarball (drwebd-4.27-linux.tgz)
seems ok.

Regards,

P.Y. Adi Prasaja