Antivirus scan

[Guest]

[bruno.pereira]

When I enable antivirus for http proxy or pop/smtp proxy, my "router" machine gets incredible slow..
Is there any reason for that?

[rosch]

Slowing it a bit down is normal. But ideally you would not even see a difference.

• How much traffic is the AV checking?
• Is it slow just at the start of the AV?
• Are your disks having problems? You can check the speed with:

Code:

hdparm -tT /dev/hda

The output should be close to the following:
/dev/hda:
 Timing cached reads:   2296 MB in  2.00 seconds = 1146.54 MB/sec
 Timing buffered disk reads:  158 MB in  3.01 seconds =  52.42 MB/sec

Also the output of

Code:

top

could be of value.

[bruno.pereira]

The output

Timing cache reads: 184 MB in 2.03 seconds = 90.64 MB/sec
Timing buffered disk reads: 32 MB in 3.10 seconds = 10.06 MB/sec

How much time does the AV take to start?

[rosch]

The output

Timing cache reads: 184 MB in 2.03 seconds = 90.64 MB/sec
Timing buffered disk reads: 32 MB in 3.10 seconds = 10.06 MB/sec

Hmm..your disk speed is slow compared to mine and mine are not the fastest.
Are you running endian on one harddisk only?

How much time does the AV take to start?

That depends on your machine but it should not take long at all. It looks to me that it's only few seconds.
But disk I/O is increased during the running of it.

Could you post the output of top?
Are you running out of RAM? If swap is used machines usually go down to a crawl speed.

[bruno.pereira]

Yes, I got an old machine to make it as router.
I was using M0n0wall before...and it was ok, now I wanted to change to Endian just because of the proxy...

Yes I'm using only one harddisk, it has 10GB.
(But it's the machine that our supervisor allocated to use as router...so it's the option that we have.. We from IT department need to make some miracles... lol)