Re: Warning: Sophie might ignore subdirectories undercertain circumstances
"L. Jankok" <[email protected]> Thu, 22 Jul 2004 19:00:27 +0200
| Newsgroups | gmane.comp.security.virus.vtools |
|---|---|
| Message-ID | <[email protected]> |
Sophos also has it's own daemon which could work with postfix and amavisd-new has a build in support for working with libsavi (http://www.csupomona.edu/~henson/www/projects/SAVI-Perl/dist/) this is, if you want to stick with Sophos.. On 0, Pete Henshall <[email protected]> wrote: :We moved from Sophie to Clamd and have had no issues since - I'd recommend :it. : : : :Pete : :-----Original Message----- :From: [email protected] [mailto:[email protected]]On :Behalf Of David Birnbaum :Sent: 22 July 2004 17:15 :To: [email protected]; Discussion about Virge/Sophie/Trophie/... :Subject: Re: [vtools] Re: Warning: Sophie might ignore subdirectories :undercertain circumstances : : :We're using it a whole lot.... I wish we had someone here capable of :maintaining it. We'd even be willing to chip in some "support" (cash? :CDs? martinis?) : :David. : :----- : :On Thu, 22 Jul 2004, L. Jankok wrote: : :> is sophie still worth using now it is not being :> mantained anymore ?. :> :> On 0, Dirk Kraemer <[email protected]> wrote: :> :Hi all! :> : :> :We noticed following problem with sophie: :> : :> : OS: SuSE Linux 9.0, 9.1 :> : Sophie Version: sophie-3.04rc2 :> : Filesystem: ReiserFS :> : :> :Within above environment, if we do a :> : :> : $ mkdir -p /tmp/dir1/dir2/dir3 :> : $ stat /tmp/dir1/dir2 :> : :> :we get a '0' for number of allocated :> :blocks for /tmp/dir1/dir2: :> : :> : File: ;/tmp/dir1/dir2+ :> : Size: 72 Blocks: 0 IO Block: 4096 ... :> : ... :> : :> :But that number seems to be used by sophie :> :to decide if a subdirectory has to be scanned. :> :Within sophie_scandir.c we find at line 86: :> : :> : if (filestat.st_blocks > 0) :> : if ((sophie_scandir(path)) > 0) { :> : closedir(dirpt); :> : return(1); /* virus found */ :> : } :> : :> :So if this values is 0, sophie does not recursively :> :scan subdirectories, does not find any viruses within. :> : :> :This effect does not occur when using ext2, ext3 with :> :SuSE or any of ext2,ext3,reiserfs with Debian Sarge. :> :So maybe check yourself if your system might have :> :the same problem. :> : :> :If you comment out the (filestat.st_blocks > 0) :> :check, sophie scans subdirectories again. However, :> :does someone know into which problems we might run :> :now? :> : :> :Regards :> : :> :Dirk :> : :> :_______________________________________________ :> :vtools mailing list :> :[email protected] :> :http://www.vanja.com/list/listinfo.cgi/vtools :> _______________________________________________ :> vtools mailing list :> [email protected] :> http://www.vanja.com/list/listinfo.cgi/vtools :> : : :_______________________________________________ :vtools mailing list :[email protected] :http://www.vanja.com/list/listinfo.cgi/vtools