Re: sophie processing not dying

"Trey Nolen" <[email protected]> Wed, 29 Jun 2005 17:29:45 -0500
Newsgroups gmane.comp.security.virus.vtools
Message-ID <[email protected]>
The majority are being cleaned up correctly.  It has been roughly 4 hours 
since I sent that email and I killed all the sophie processes right after I 
sent them.  I just checked and I have 6 sophie processes running now. 
These processes are static.  We have been running sophos/sophie for years 
and this has just started happening since I made the update to the new 
sophie and the new sophos.  Unfortunately, I did do both updates (the new 
engine) at the same time, so I can't tell which one is causing the issue. 
We had been running 3.04rc2 without incident for a long time, but I had seen 
the issues with file corruption so we changed the sophie version before 
updating to 3.95.

Trey Nolen

----- Original Message ----- 
From: "Scott Walker" <[email protected]>
To: "Discussion about Virge/Sophie/Trophie/..." <[email protected]>
Sent: Wednesday, June 29, 2005 1:41 PM
Subject: Re: [vtools] sophie processing not dying


> Is anybody else noticing this problem?  I just ran a test of my own and I
> see all the child processes being cleaned up when they have finished.
>
> Is it possible that the 35 processes you see are actually currently
> involved in scanning files?  Also, if you don't want a lot of concurrent
> Sophie processes, then I would recommend setting the maxproc configuration
> option to something smaller than 100.
>
> Scott.
>
>
>
> [email protected] wrote on 06/29/2005 07:12:47 AM:
>
>> Since upgrading to the new Sophie ( 3.04) from 3.04rc? and upgrading from
>
>> sweep 3.92 to 3.95, I'm not having trouble with corrupted files but I AM
>> having trouble with lots of sophie processes hangning around.  Before the
>
>> change, I'd have 1 or 2 processes.  Usually I would have to restart
> sophie
>> about every 3 days because it would quit responding.  When that happened,
> it
>> would genereally have 2 processes running.   Now, it is scanning OK, but
>> there are more and more sophies. Right now, I have 35 of them.  Yesterday
>
>> afternoon, my server ran out of memory and I had to kill off all the
>> sophies.
>>
>> Here is some sophie info:
>>   mail:/var/qmail/control/users# ps ax |grep sophie | wc -l
>> 35
>> mail:/var/qmail/control/users# sophie -v
>> NOTICE           : Sophie configuration file not specified - falling back
> to
>> defaults
>> NOTICE           : Using Sophie configuration file '/etc/sophie.cfg'
>> NOTICE           : Setting configuration options - please wait...
>> NOTICE           : Configuration options set
>> Sophos engine    : Sophos engine version 2.30
>> Sophie IDE       : Sophos IDE version 3.95 (detects 106591 viruses)
>> SAVI config      : /etc/sophie.savi
>> Max processes    : 100
>> Socket path      : /var/spool/qmailscan/sophie
>> Umask            : 7
>> PID file         : /var/run/sophie.pid
>> Timeout          : 300 seconds
>> Running as user  : qscand
>> Socket group     : qmail
>> Logname          : sophie
>> Log facility     : 16 (mail)
>> Log priority     : 5 (notice)
>> Error strings?   : yes
>> Timestamps?      : no
>> Show virus name? : yes
>> Callbacks?       : yes
>> limit_classif    : 10
>> limit_nextfile   : 10000
>> limit_decompr    : 1000
>> socket_check     : yes
>> Sophie version   : 3.04
>> NOTICE           : pSAVI cleaned up and released/terminated
>>
>>
>> I am calling sophie with qmail-scanner.
>>
>> Trey Nolen
>>
>>
>> _______________________________________________
>> vtools mailing list
>> [email protected]
>> http://www.vanja.com/list/listinfo.cgi/vtools
>
>
> --
> Scott Walker
> Software Integration & Support Engineer, Sophos
>
> Tel: 604 484 6883
> Web: www.sophos.com
> Sophos - protecting businesses against viruses and spam
>
> _______________________________________________
> vtools mailing list
> [email protected]
> http://www.vanja.com/list/listinfo.cgi/vtools
>