Re: Sophie v3.05 and sophos-ide-update.pl disagree on PID?

Alan Thew <[email protected]> Fri, 27 Jan 2006 09:38:59 +0000 (GMT Standard Time)
Newsgroups gmane.comp.security.virus.vtools
Message-ID <[email protected]>
On Fri, 27 Jan 2006 14:21 , Alain Fauconnet <[email protected]> said:

> Hello readers,
>
> I've eventually taken the step from Sophie v1.44 to v3.05 (*).
> Everything is file except that sophos-ide-update.pl keeps saying:
>
> Which Sophie PID: 12360 or 12359? Using the later.
> SIGHUP sent to Sophie[12359]
>
> Looking at the box, I see this:
>
> ps lxwwa | grep sophie
> 5     0 12359     1   9   0  3416  704 wait4  S    ?          0:00 /usr/local/sbin/sophie -D
> 5    70 12360 12359   9   0 19976 17612 wait_f S   ?          0:05 /usr/local/sbin/sophie -D
> 1    70 25737 12360   9   0 19972 14612 unix_s S   ?          0:01 /usr/local/sbin/sophie -D
> (...more processes...)
>
> So 12359 seems to be the process leader but in /var/run/sophie.pid there
> is 12360. Hence sophos-ide-update.pl is confused (and so am I).
>
>> From http://www.vanja.com/listarc/vtools/2005-November/001822.html
> I understand that the right one would be 12360. Unfortunately that's not
> the one sophos-ide-update.pl chooses.
>
> Any input on this?

All I can add is that we've seen this but only once (so far). It seems to
get it right most times. We're running ours on Linux.

Alan Thew
>