Trying to lower load for CXS

[sahostking]

I think I got it to lower load a bit but now I'm noticing something strange with CXS watch:

This is CXS watch configuration:

/usr/sbin/cxs --Wstart --allusers --www --smtp -I /etc/cxs/cxs.ignore --options M --qoptions Mv --quarantine /cxs/scan/ --Wmaxchild 3 --nofallback --Wloglevel 0 --Wsleep 15 --filemax 0 --sizemax 200000 --Wrateignore 600

I'm noticing it is showing Script Version Checks in the scans. Why is that?

Am I doing something wrong.

I just want it to scan for "fingerprint match" and "virus"

[Sarah]

I think I got it to lower load a bit but now I'm noticing something strange with CXS watch:

This is CXS watch configuration:

/usr/sbin/cxs --Wstart --allusers --www --smtp -I /etc/cxs/cxs.ignore --options M --qoptions Mv --quarantine /cxs/scan/ --Wmaxchild 3 --nofallback --Wloglevel 0 --Wsleep 15 --filemax 0 --sizemax 200000 --Wrateignore 600

I'm noticing it is showing Script Version Checks in the scans. Why is that?

Am I doing something wrong.

I just want it to scan for "fingerprint match" and "virus"

If you don't want to scan for script versions you need to specify --nosversionscan in your cxs command in cxswatch.sh, as it is on by default.

According to your command line, you are actually only scanning for fingerprints, not viruses. If you want to scan for both fingerprints and viruses, you should change your --options list to --options Mv.

Regards,
Sarah