TrendMicro Interscan Viruswall v6.02 auf Etch
Hallo zusammen,
wir nutzen die TrendMicro Interscan Viruswall v6.02 auf Etch, davon aber
lediglich die HTTP-Engine. Das Teil läuft soweit eigentlich performant
und zufriedenstellend, jedoch haben wir da ein kleineres Problem und
TrendMicro supportet Debian natürlich nicht.
Wie gesagt, nach kleineren Anpassungen läuft es nahezu anstandslos.
Sporadisch jedoch gibt es nach dem Update der Pattern (merkwürdigerweise
meist um 05:00 Uhr morgens) Probleme mit dem Neustart der HTTP-Engine.
Mal sind ein paar Tage dazwischen, mal Wochen. Nach dem Neustart der
ganzen Suite kommt auch die HTTP-Engine ohne Mucken wieder hoch.
Längerer Logauszug ist unten angehängt:
"2007/12/18 05:00:13,-12143223,Daemon failed to start"
Im Einsatz ist diese Version hier (kann jeder mal testen, da Trial):
http://www.trendmicro.com/download/product.asp?productid=13
-> ISVW_v6.02_7672_release.tar.gz
Die Kernel Parameter
kernel.shmall = 2147483648
kernel.shmmax = 2147483648
sind aufgrund des hohen RAM Bedarfs erhöht worden. Wenn es jemand
nachvollziehen möchte, bei Problemen mit der Installation oder
Inbetriebnahme kann ich gerne weiterhelfen.
Falls jemand noch eine Idee hat, woran es liegen könnte, ich bin für
alles offen.
Grüße
Mathias Tauber
# cat /opt/trend/isvw6/log/eventlog.20071218.0001
2007/12/18 00:00:01,-12103821,ISVW : ISVW success to get version of AU
about item Virus Engine
2007/12/18 00:00:01,-12103821,ISVW : ISVW success to get version of AU
about item Virus Pattern
2007/12/18 01:00:04,-12103821,ISVW : ISVW success to get version of AU
about item Virus Engine
2007/12/18 01:00:04,-12103821,ISVW : ISVW success to get version of AU
about item Virus Pattern
2007/12/18 02:01:38,-12103821,ISVW : ISVW success to get version of AU
about item Virus Engine
2007/12/18 02:01:39,-12103821,ISVW : ISVW success to get version of AU
about item Virus Pattern
2007/12/18 03:00:05,-12103821,ISVW : ISVW success to get version of AU
about item Virus Engine
2007/12/18 03:00:05,-12103821,ISVW : ISVW success to get version of AU
about item Virus Pattern
2007/12/18 04:00:03,-12103821,ISVW : ISVW success to get version of AU
about item Virus Engine
2007/12/18 04:00:04,-12103821,ISVW : ISVW success to get version of AU
about item Virus Pattern
2007/12/18 05:00:02,-12103821,ISVW : ISVW success to get version of AU
about item Virus Engine
2007/12/18 05:00:02,-12103821,ISVW : ISVW success to get version of AU
about item Virus Pattern
2007/12/18 05:00:13,-12103821,ISVW : ISVW success to duplicate AU about
item Virus Pattern
2007/12/18 05:00:13,-12362435,HTTP: ActiveUpdate starting now.
2007/12/18 05:00:13,-12144540,Scan: Updating the virus and content
protection components...
2007/12/18 05:00:13,-12362435,HTTP: ActiveUpdate finished.
2007/12/18 05:00:13,-12143223,Daemon failed to start
2007/12/18 05:00:15,-12144540,Scan: Virus Scan Engine <8.5.1001> Virus
Pattern <4.893.00> Spyware Pattern <0.569.00> IntelliTrap Black Pattern
<0.107.00> IntelliTrap White Pattern <0.249.00>
2007/12/18 05:00:15,-12144540,Scan: The virus and content protection
components were successfully updated.
2007/12/18 05:01:23,-12123077,Control Manager Agent: Terminating\,
please wait...
2007/12/18 05:01:24,-12483226,Rescan service exits.
2007/12/18 05:01:25,-12399258,Resend service exits.
2007/12/18 05:01:25,-12315331,Notification service exits.
2007/12/18 05:01:25,-12106448,ISVW Services: UnRegister to ISVW ...
2007/12/18 05:01:25,-12106448,ISVW Services: UnRegistration from ISVW is
okay.
2007/12/18 05:01:25,-12106448,ISVW Services: exit.
2007/12/18 05:01:35,-12103821,InterScan VirusWall 6: Terminating...
2007/12/18 05:01:39,-12102838,InterScan VirusWall 6: Initializing...
2007/12/18 05:01:42,-12102838,InterScan VirusWall 6: License check:
Enable AntiVirus; Enable AntiSpam; Enable ContentFilter; Enable OPS;
Enable URLFilter; Enable AntiPhishing; Enable AntiBotTrap; Enable
AntiSpyware.
2007/12/18 05:01:42,-12102838,InterScan VirusWall 6: AC: Full Premium;
Seats: 26; Expired Date: 20081024; Status: Activated.
2007/12/18 05:01:43,-12145441,Scan: Initializing...
2007/12/18 05:01:44,-12145435,HTTP: Initializing...
2007/12/18 05:01:44,-12108987,ISVW Services: Register to ISVW ...
2007/12/18 05:01:44,-12145435,HTTP: Successfully updated the InterScan
VirusWall 6 license status.
2007/12/18 05:01:44,-12145435,HTTP: Enabled antivirus feature.
2007/12/18 05:01:44,-12145435,HTTP: Enabled Outbreak Prevention Policy
(OPP) feature.
2007/12/18 05:01:44,-12145435,HTTP: Enabled URL filter feature.
2007/12/18 05:01:44,-12145435,HTTP: Enabled anti-phishing feature.
2007/12/18 05:01:44,-12145435,HTTP: Enabled IntelliTrap feature.
2007/12/18 05:01:44,-12145435,HTTP: Enabled antispyware feature.
2007/12/18 05:01:44,-12108987,ISVW Services: Registration to ISVW is okay.
2007/12/18 05:01:44,-12317870,Notification service starts.
2007/12/18 05:01:44,-12401797,Resend service starts.
2007/12/18 05:01:44,-12485765,Rescan service starts.
2007/12/18 05:01:46,-12145441,Scan: Virus Scan Engine <8.5.1001> Virus
Pattern <4.893.00> Spyware Pattern <0.569.00> IntelliTrap Black Pattern
<0.107.00> IntelliTrap White Pattern <0.249.00>
2007/12/18 05:01:46,-12145435,HTTP : Virus Scan Engine <8.5.0.1001>
Virus Pattern <4.893.00> Spyware Pattern <0.569.00> Loaded
2007/12/18 05:01:48,-12128853,Control Manager Agent: Initializing\,
please wait...
2007/12/18 05:01:48,-12128853,Control Manager Agent: Registration to
ISVW successful.
2007/12/18 05:01:48,-12145441,Scan: Spam Engine <5.0.0.1023> Pattern
<15522001> Loaded.
Reply to: