Sophie v3.05 and sophos-ide-update.pl disagree on PID?

Alain Fauconnet <[email protected]> Fri, 27 Jan 2006 14:21:54 +0700
Newsgroups gmane.comp.security.virus.vtools
Message-ID <[email protected]>
Hello readers,

I've eventually taken the step from Sophie v1.44 to v3.05 (*).
Everything is file except that sophos-ide-update.pl keeps saying:

Which Sophie PID: 12360 or 12359? Using the later.
SIGHUP sent to Sophie[12359]

Looking at the box, I see this:

ps lxwwa | grep sophie
5     0 12359     1   9   0  3416  704 wait4  S    ?          0:00 /usr/local/sbin/sophie -D
5    70 12360 12359   9   0 19976 17612 wait_f S   ?          0:05 /usr/local/sbin/sophie -D
1    70 25737 12360   9   0 19972 14612 unix_s S   ?          0:01 /usr/local/sbin/sophie -D
(...more processes...)

So 12359 seems to be the process leader but in /var/run/sophie.pid there
is 12360. Hence sophos-ide-update.pl is confused (and so am I).

>From http://www.vanja.com/listarc/vtools/2005-November/001822.html
I understand that the right one would be 12360. Unfortunately that's not
the one sophos-ide-update.pl chooses.

Any input on this?

Greets,
_A_

(*) yes, I was still running v1.44 just because it was stable as a rock and
reading the mailing list, v3.0x seemed to be having some trouble. However
since the upgrade to Sophos v4.01 engine, v1.44 started happily
ignoring infected attachments. Hence a large outbreak of Netsky.P on campus
that had my phone line turn red hot :-)
-- 
Alain Fauconnet
IT Technical Manager
Asian Institute of Technology