Sophos failure: sophos-autoupdate is missing new Sophos files

Paul Lamb pal at mssl.ucl.ac.uk
Wed Nov 4 10:45:08 GMT 2009


Mark Nienberg wrote:
> Paul Lamb wrote:
>> The Sophos AV November 2009 distribution:-
>>     Product version           : 4.47.0
>>     Engine version            : 3.01.0
>>     Virus data version        : 4.47
>>     User interface version    : 2.07.250
>>     Platform                  : Linux/Intel
>>     Released                  : 02 November 2009
>>
>> is installing additional files
>>     ./lib/xvdl*.vdb
>>
>> sophos-autoupdate will not create softlinks to these in ./ide/
>>
>> Running sweep through strace shows an open failure on 
>> /usr/local/Sophos/ide/xvdl01.vdb leading to
>>  "Error initialising detection engine - missing part of virus data"
>>
>> As a quick workround, I have added the following cloned fragment into 
>> sophos-autoupdate before "Add the new swpmess.dat..." -
>>
>> # Add the even newer xvdl*.vdb files if they are there
>> foreach $vdlsus ("xvdl") {
>>   foreach $number (1..99) {
>>     $string = $vdlsus . sprintf("%02d", $number) . ".vdb";
>>     symlink("$VDLDir/$string", $string) if -f "$VDLDir/$string";
>>   }
>> }
>> # end
>>
>> I am running MailScanner version 4.72.5 whose version of 
>> sophos-autoupdate looks little different to the current version.
>>
>> Regards,
>> Paul Lamb
> I guess you are using Sophos V4, correct?
> I have V5 and it reports:
> 
> [root at tesla bin]# savscan -v
> SAVScan virus detection utility
> Copyright (c) 1989-2009 Sophos Group. All rights reserved.
> 
> System time 06:19:20 PM, System date 03 November 2009
> 
> Product version           : 4.46.0
> Engine version            : 3.00.1
> Virus data version        : 4.46
> User interface version    : 2.07.249
> Platform                  : Linux/Intel
> Released                  : 05 October 2009
> Total viruses (with IDEs) : 1061548
> 
> Information on additional data files:
> 
> Data file name            : /opt/sophos-av/lib/sav/daonol-a.ide
> Data file type            : IDE
> Data file date            : 03 November 2009, 16:12:47
> Data file status          : Loaded
> 
> etc...
> 
> For V5, sophos-autoupdate just calls the Sophos provided savupdate 
> program and it takes care of itself.  I think the edit you show would 
> only be needed for V4.
> 
> Mark Nienberg

Yes, I am using Sophos v4. Thanks for adding the caveat.

Paul





More information about the MailScanner mailing list