Sophie and Sophos 4.0x

Chris Wakelin <[email protected]> Tue, 20 Dec 2005 11:43:55 +0000
Newsgroups gmane.comp.security.virus.vtools
Message-ID <[email protected]>
Hi,

Anybody else having problems with Sophie and Sophos 4.0x? I find when I
HUP Sophie, it seems to get stuck (I get a line "NOTICE : Reloading
virus patterns/engine" but no corresponding "NOTICE : Virus
patterns/engine reloaded"). "strace" (actually "strace32", see below)
doesn't even manage to attach to the process!

It works OK for Sophos 3.99 and earlier (though I find that I can't then
stop Sophie without a "kill -9"; plain "kill" works if I haven't sent a
HUP).

I've tried both Sophie 3.04rc2 (which we've run for years) and Sophie
3.05. The machine is an AMD Opteron server running SuSE Enterprise 8
64-bit (but with Sophie compiled 32-bit, of course, as the SAVI library
is 32-bit).

I've got an old (2002) copy of the SAVI SDK, and, as far as I can see,
Sophie is doing what it should, calling LoadVirusData to reload the IDEs.

Best Wishes,
Chris

-- 
--+---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+-
Christopher Wakelin,                           [email protected]
IT Services Centre, The University of Reading,  Tel: +44 (0)118 378 8439
Whiteknights, Reading, RG6 2AF, UK              Fax: +44 (0)118 975 3094