Could not open dir
"SJohnson-RAF" <[email protected]> Sat, 16 Apr 2005 10:17:07 -0500
| Newsgroups | gmane.comp.security.virus.vtools |
|---|---|
| Message-ID | <H000006700006d42.1113664626.mail.netprof.us@MHS> |
When I initialize Sophie, it runs fine for a while (although the timing is
around 6000-8000ms for some scans that should take under a second as
compared to the file based sophos).
Anyway. I was watching the maillog file for about 10 minutes and all
seemed to be humming along fine when I started to see hundreds of the
message below scroll on the screen. I looked at the directory and it was
there and files were in the parts directory. Eventually the directory
disappeared but the messages kept scrolling. I killed the sophie daemon
and restarted amavisd, it's now giving me a warning that it can't connect
to sophie (because sophie is down) but I never see the messages below
scroll in the log.
The messages was a spam from a "discount" software seller and the files
appeared to be gifs or jpegs. It appeared that the message also had the
files mime encoded in the main message.
I am running the most recent version of sophos (just updated last
Tuesday).
Any ideas on what is going on here?
Thanks much.
Scott
-------------------------- maillog clip
-----------------------------------
Apr 16 09:01:22 fw sophie[29466]: WARNING : Could not open dir
(/var/amavis/amavis-20050416T085535-29377/parts/../../../cache/../cache/../cache/../cache/../cache/../cache/../cache/../cache/../cache/../cache/../cache/../cache/../cache/../cache/../cache/../cache/../cache/../cache/../cache/../cache/../cache/../cache/../cache/../cache/../cache/../cache/../cache/../cache/../cache/../cache/../cache/../cache/../cache/../cache/../cache/../cache/../cache/../cache/../cache/../cache/../cache/../cache/../cache/../cache/../cache/../cache/../c
Apr 16 09:01:22 fw sophie[29466]: WARNING : Error: File could not
be accessed
Apr 16 09:01:25 fw last message repeated 166 times
Apr 16 09:01:25 fw sophie[29466]: WARNING : Could not open dir
(/var/amavis/amavis-20050416T085535-29377/parts/../../../cache/../cache/../cache/../cache/../cache/../cache/../cache/../cache/../cache/../cache/../cache/../cache/../cache/../cache/../cache/../cache/../cache/../cache/../cache/../cache/../cache/../cache/../cache/../cache/../cache/../cache/../cache/../cache/../cache/../cache/../cache/../cache/../cache/../cache/../cache/../cache/../cache/../cache/../cache/../cache/../cache/../cache/../cache/../cache/../cache/../cache/../c
Apr 16 09:01:25 fw sophie[29466]: WARNING : Could not open dir
(/var/amavis/amavis-20050416T085535-29377/parts/../../../cache/../cache/../cache/../cache/../cache/../cache/../cache/../cache/../cache/../cache/../cache/../cache/../cache/../cache/../cache/../cache/../cache/../cache/../cache/../cache/../cache/../cache/../cache/../cache/../cache/../cache/../cache/../cache/../cache/../cache/../cache/../cache/../cache/../cache/../cache/../cache/../cache/../cache/../cache/../cache/../cache/../cache/../cache/../cache/../cache/../cache/../c
----------------------------------------------------------------------------------
_______________________________________________
vtools mailing list
[email protected]
http://www.vanja.com/list/listinfo.cgi/vtools