Sophie v3.05 and sophos-ide-update.pl disagree on PID?
Alain Fauconnet <[email protected]> Fri, 27 Jan 2006 14:21:54 +0700
| Newsgroups | gmane.comp.security.virus.vtools |
|---|---|
| Message-ID | <[email protected]> |
Hello readers, I've eventually taken the step from Sophie v1.44 to v3.05 (*). Everything is file except that sophos-ide-update.pl keeps saying: Which Sophie PID: 12360 or 12359? Using the later. SIGHUP sent to Sophie[12359] Looking at the box, I see this: ps lxwwa | grep sophie 5 0 12359 1 9 0 3416 704 wait4 S ? 0:00 /usr/local/sbin/sophie -D 5 70 12360 12359 9 0 19976 17612 wait_f S ? 0:05 /usr/local/sbin/sophie -D 1 70 25737 12360 9 0 19972 14612 unix_s S ? 0:01 /usr/local/sbin/sophie -D (...more processes...) So 12359 seems to be the process leader but in /var/run/sophie.pid there is 12360. Hence sophos-ide-update.pl is confused (and so am I). >From http://www.vanja.com/listarc/vtools/2005-November/001822.html I understand that the right one would be 12360. Unfortunately that's not the one sophos-ide-update.pl chooses. Any input on this? Greets, _A_ (*) yes, I was still running v1.44 just because it was stable as a rock and reading the mailing list, v3.0x seemed to be having some trouble. However since the upgrade to Sophos v4.01 engine, v1.44 started happily ignoring infected attachments. Hence a large outbreak of Netsky.P on campus that had my phone line turn red hot :-) -- Alain Fauconnet IT Technical Manager Asian Institute of Technology