Re: SOPHIE/Sophos stops responding after processing numerousmessages

Matt Bruce wrote:
> The MIMEDefang installation also runs other virus scanners (ClamAV,
> F-Prot, and Symantec AVSE) and uses SpamAssassin. There's a cron job to
> update the Sophos virus patterns every hour (ideget script) and another
> to update the scan engine once a week (savget script), if updates are
> available. If updates are found, it'll install them and do a "killall -s
> HUP sophie".
> 
> After processing numerous messages (well, actually files in the Work/
> directory that MIMEDefang creates for each message), the daemon will
> just stop processing scan requests although it's still running and the
> socket is still present (I think). Nothing short of killing the sophie
> daemon and restarting it will resolve it.

Hi Matt,

I've had similar problems with Sophie on my systems with Exiscan. Have 
you noticed that the start times of the hung processes appear to 
coincide with hourly running of the IDE update script?

I suspect it's the "killall -s HUP sophie" doing it, I think the child 
processes don't like being HUPed. Change your update script to something 
like:
  "kill -HUP `cat /var/run/sophie.pid`"
And see if your intermittent problem goes away. It has so far for me.

Cheers,
Matt.