Re: trophie and virus defs

On Tue, Mar 09, 2004 at 02:22:15PM -0500, Covington, Chris wrote:
> Hi all,
> 
> Does anyone know how to get trophie to 'see' virus defs?  Whenever I run
> the program I get:
> 
> [root@frank2k3 trophie-1.12]# ./trophie 
> VSReadVirusPattern() failed (return code: [-4])

It's  my  experience that libvsapi.so looks for virus definition files
into /etc/iscan (at least without using some API calls to  change  the
default location - something Trophie doesn't). Depending on the  Trend
product  you  have  installed,  you  may  have  to create links to the
lpt$vpn.xxx files there from their actual location (usually  somewhere
under /opt)

> 
> How do I tell it where to read the latest virus def files?
> 

It should do this automatically when started or (I  presume -  see  my
recent posting) when receiving a SIGHUP.

> Also, is there a trophie virus def update script similar to
> sophos-ide-update for sophie?

Trend products usually have some way to update defs from  the  command
line. However, since I want the CPRs too (Controlled Pattern Releases)
I have started writing a sophos-ide-update.pl-like for Trend. It's not
so nice because my Perl skills are light-years behind Mark's,  but  it
will  do  the  job. I'll post a link to it when it's done (should be a
matter  of days). I'm only missing the engine (livsapi.so) update part
at  this  point.  I'm  still  fighting  with  Perl's  brain-challenged
Archive::Tar module. It's kind of  a  hack  too.  To  figure  out  the
current  version  numbers,  I have to parse the whatsnew.txt files for
the pattern updates, and even worse the web page that lists the engine
updates.

Greets,
_Alain_