RE: Sophie Error: "The main body of virus data is out of date"

Hi,

On Monday, June 27, 2005 16:22:01 -0400 [email protected] wrote:
> Well, pretty much.  Do you have any tools that download new .ide
> files on  a schedule?

Our crontab has this:

| # Look for fresh Sophos antivirus patterns every 10 minutes:
| */10 * * * * /usr/local/bin/updatesophos

A small shell script (a collection of grep, sed, netcat, date, wget and
sweep calls) that just reads the modification time of the most recent
IDE file. If it is newer than a cached timestamp, it will download and
extract the contents. Thus, only a small(ish) HTTP header is actually
transferred if there is no new file available.

Furthermore, we have this:

| # Install new sweep and libraries if available:
| 23 10 28,1 * * /usr/local/bin/updatesophos.mon

This isn't as clever as the above, but only runs twice a month. Both
work without hassle at our site.

[...]
> There are scripts out there to automatically update the .ide files (I
> use  my own, as its a really simple process, and at the time nothing=20
> pre-written was available), but you will still want to update your
> engine  every couple of months, manually.

This is of course a better way than the one described above: a good
scenario would incorporate a testing of the freshly installed files
especially after installing a new version of sweep.

Regards,
 -S-
--=20
BLUE MARS - Gesellschaft f=FCr digitale Kommunikation mbH
=20
Sebastian Maus                mailto:[email protected]
System Services               http://www.bluemars.de
Ebersheimstrasse 5            Tel: +49 (0)69 469973-0
60320 Frankfurt/M.            Fax: +49 (0)69 469973-99