sophie 3.04 failed detecting when sophie 1.44 does

"Patrice Blot" <[email protected]> Tue, 9 Mar 2004 17:00:31 +0100
Newsgroups gmane.comp.security.virus.vtools
Message-ID <[email protected]>
Hello,

I was using sophie 1.44 and upgraded to 3.04 but sophie 3.04 seems not detecting a ot of virus when sophie 1.44 does it well :

/tmp/toscan contain an unpacked mail (reformime) and contain a virus
sophie1.44 is ons socket /var/run/sophie and sophie3.04 on socket /var/run/sophie3

[root@stanley toscan]# /usr/local/src/sophie-3.04rc2/sample_apps/perl_sock/check_dir.pl /var/run/sophie3 /tmp/toscan/
[/tmp/toscan//stanmp3music.pif] => response [0]
[/tmp/toscan//stan1078824021.28873-0.stanley.fc-net.fr] => response [0]

[root@stanley toscan]# /usr/local/src/sophie-3.04rc2/sample_apps/perl_sock/check_dir.pl /var/run/sophie /tmp/toscan/
[/tmp/toscan//stanmp3music.pif] => response [1:W32/Netsky-D]
[/tmp/toscan//stan1078824021.28873-0.stanley.fc-net.fr] => response [0]

But sometimes sophie=3.04 detect other viruses. 
of course the 2 uses the same libsavi (> glibc2.2)
Any idea ?


 
Patrice Blot
FC NET
Ingénieur système - Responsable Technique
Tél : 03 81 48 09 09 - Fax : 03 81 48 43 25
Besançon - France