[sanesecurity] Re: Long DB refresh times

On 4/25/12 4:49 PM, Alan Stern wrote:

>> May I add, FWIW: several of the malware sigs refer to drive-by malware
>> infection schemes, and the URLs they target are used for only a few
>> hours in email.
> 
> Which signature files are like that?

The malware one.


>> Even updating every hour is far from being optimal, IMHO (on my systems
>> those signatures are refreshed every 5 minutes directly from my own
>> repository)...
> 
> How do you update the repository?

More or less like any of you guys, but I rely on my own local repository
and use a very small selection of DBs only.
Reload times are usually about 30-35 secs, and dropped down to 4-6 secs
only after applying Steve's filters...

Other related posts: