Re: RE : sophie 3.04 libsavi 3.94

Martin Zuziak wrote:

>>>>however when testing with GTUBE sophie doesnt appear to catch 
>>>>or indeed 
>>>>log anything whereas clamav as expected detects and sends a 
>>>>550message...
>>>>
>>>>any clues as to why its not even scanning now??
>>>>
>>>>libsavi 3.94
>>>>sophie 3.04 (compiled 32bit becuase of libsavi )
>>>>Slamd64 (slackware 10.1 64bit linux on dual opterons)
>>>>/lib/libc.so.6
>>>>GNU C Library stable release version 2.3.2, by Roland McGrath et al.
>>>>
>>>>any other info needed??
>>>>        
>>>>
>
>Try running
>
>sophie -d -f eicar.com
>
>and send the output.
>
>Martin Zuziak <[email protected]>
>
>_______________________________________________
>vtools mailing list
>[email protected]
>http://www.vanja.com/list/listinfo.cgi/vtools
>  
>
NOTICE : Sophie configuration file not specified - falling back to defaults
NOTICE : Using Sophie configuration file '/etc/sophie.cfg'
NOTICE : Setting configuration options - please wait...
NOTICE : Option 'GrpExecutable' set to '1' /DEBUG,31796/
NOTICE : Option 'GrpArchiveUnpack' set to '0' /DEBUG,31796/
NOTICE : Option 'GrpSelfExtract' set to '1' /DEBUG,31796/
NOTICE : Option 'GrpInternet' set to '1' /DEBUG,31796/
NOTICE : Option 'GrpMSOffice' set to '1' /DEBUG,31796/
NOTICE : Option 'GrpMisc' set to '1' /DEBUG,31796/
NOTICE : Option 'GrpSuper' set to '0' /DEBUG,31796/
NOTICE : Option 'GrpDisinfect' set to '0' /DEBUG,31796/
NOTICE : Configuration options set
Sophos engine : Sophos engine version 2.30
Sophie IDE : Sophos IDE version 3.94 (detects 104784 viruses)
SAVI config : /etc/sophie.savi
Max processes : 200
Socket path : /tmp/sophie
Umask : 7
PID file : /var/log/sophie.pid
Timeout : 300 seconds
Running as user : exim
Socket group : exim
Logname : sophie
Log facility : 16 (mail)
Log priority : 5 (notice)
Error strings? : yes
Timestamps? : no
Show virus name? : yes
Callbacks? : yes
limit_classif : 10
limit_nextfile : 10000
limit_decompr : 1000
socket_check : yes
Sophie version : 3.04
NOTICE : Scanning file 'eicar.com'
NOTICE : Scanning file 'eicar.com' /DEBUG,31796/
WARNING : Scan result => 'eicar.com' infected with virus 'EICAR-AV-Test'
NOTICE : pSAVI cleaned up and released/terminated
NOTICE : SAVI cleaned up and terminated


so it obviously can detect it in this mode but when i fun it as daemon
/usr/local/bin/sophie -C /etc/sophie.cfg -D

is how i start sophie but it still doesnt detect eicar when run as above.