TrendMicro Interscan Viruswall v6.02 on Etch
Hello,
we're using TrendMicro Interscan Viruswall v6.02 (HTTP engine only) on
Debian Etch (32bit SMP). After some debugging and customising the
installer went through and the software is running with great
performance. There's one little problem but TrendMicro doesn't support
Debian so...
After running it a while we encountered problems with the automatic
pattern updates. Sometimes (can be once a week, less or more) the HTTP
engine fails to start after the automatic pattern updates. It says (see
more at the bottom of this mail):
"2007/12/18 05:00:13,-12143223,Daemon failed to start"
Curiously it happens almost everytime at 5am but not always. So we did a
bit debugging but that's not easy with closed software. We changed some
configuration and kernel values because it uses a lot of RAM
kernel.shmall = 2147483648
kernel.shmmax = 2147483648
but still the same. We're using this version:
http://www.trendmicro.com/download/product.asp?productid=13
-> ISVW_v6.02_7672_release.tar.gz
It's a trial version so you can try also if you want to. Problems with
the installer are easy to fix, just ask if you are interested.
So if anybody has a hint or knows the problem just let me know, thanks.
Cheers
Mathias
### Full Log Output ###
# cat /opt/trend/isvw6/log/eventlog.20071218.0001
2007/12/18 00:00:01,-12103821,ISVW : ISVW success to get version of AU
about item Virus Engine
2007/12/18 00:00:01,-12103821,ISVW : ISVW success to get version of AU
about item Virus Pattern
2007/12/18 01:00:04,-12103821,ISVW : ISVW success to get version of AU
about item Virus Engine
2007/12/18 01:00:04,-12103821,ISVW : ISVW success to get version of AU
about item Virus Pattern
2007/12/18 02:01:38,-12103821,ISVW : ISVW success to get version of AU
about item Virus Engine
2007/12/18 02:01:39,-12103821,ISVW : ISVW success to get version of AU
about item Virus Pattern
2007/12/18 03:00:05,-12103821,ISVW : ISVW success to get version of AU
about item Virus Engine
2007/12/18 03:00:05,-12103821,ISVW : ISVW success to get version of AU
about item Virus Pattern
2007/12/18 04:00:03,-12103821,ISVW : ISVW success to get version of AU
about item Virus Engine
2007/12/18 04:00:04,-12103821,ISVW : ISVW success to get version of AU
about item Virus Pattern
2007/12/18 05:00:02,-12103821,ISVW : ISVW success to get version of AU
about item Virus Engine
2007/12/18 05:00:02,-12103821,ISVW : ISVW success to get version of AU
about item Virus Pattern
2007/12/18 05:00:13,-12103821,ISVW : ISVW success to duplicate AU about
item Virus Pattern
2007/12/18 05:00:13,-12362435,HTTP: ActiveUpdate starting now.
2007/12/18 05:00:13,-12144540,Scan: Updating the virus and content
protection components...
2007/12/18 05:00:13,-12362435,HTTP: ActiveUpdate finished.
2007/12/18 05:00:13,-12143223,Daemon failed to start
2007/12/18 05:00:15,-12144540,Scan: Virus Scan Engine <8.5.1001> Virus
Pattern <4.893.00> Spyware Pattern <0.569.00> IntelliTrap Black Pattern
<0.107.00> IntelliTrap White Pattern <0.249.00>
2007/12/18 05:00:15,-12144540,Scan: The virus and content protection
components were successfully updated.
2007/12/18 05:01:23,-12123077,Control Manager Agent: Terminating\,
please wait...
2007/12/18 05:01:24,-12483226,Rescan service exits.
2007/12/18 05:01:25,-12399258,Resend service exits.
2007/12/18 05:01:25,-12315331,Notification service exits.
2007/12/18 05:01:25,-12106448,ISVW Services: UnRegister to ISVW ...
2007/12/18 05:01:25,-12106448,ISVW Services: UnRegistration from ISVW is
okay.
2007/12/18 05:01:25,-12106448,ISVW Services: exit.
2007/12/18 05:01:35,-12103821,InterScan VirusWall 6: Terminating...
2007/12/18 05:01:39,-12102838,InterScan VirusWall 6: Initializing...
2007/12/18 05:01:42,-12102838,InterScan VirusWall 6: License check:
Enable AntiVirus; Enable AntiSpam; Enable ContentFilter; Enable OPS;
Enable URLFilter; Enable AntiPhishing; Enable AntiBotTrap; Enable
AntiSpyware.
2007/12/18 05:01:42,-12102838,InterScan VirusWall 6: AC: Full Premium;
Seats: 26; Expired Date: 20081024; Status: Activated.
2007/12/18 05:01:43,-12145441,Scan: Initializing...
2007/12/18 05:01:44,-12145435,HTTP: Initializing...
2007/12/18 05:01:44,-12108987,ISVW Services: Register to ISVW ...
2007/12/18 05:01:44,-12145435,HTTP: Successfully updated the InterScan
VirusWall 6 license status.
2007/12/18 05:01:44,-12145435,HTTP: Enabled antivirus feature.
2007/12/18 05:01:44,-12145435,HTTP: Enabled Outbreak Prevention Policy
(OPP) feature.
2007/12/18 05:01:44,-12145435,HTTP: Enabled URL filter feature.
2007/12/18 05:01:44,-12145435,HTTP: Enabled anti-phishing feature.
2007/12/18 05:01:44,-12145435,HTTP: Enabled IntelliTrap feature.
2007/12/18 05:01:44,-12145435,HTTP: Enabled antispyware feature.
2007/12/18 05:01:44,-12108987,ISVW Services: Registration to ISVW is okay.
2007/12/18 05:01:44,-12317870,Notification service starts.
2007/12/18 05:01:44,-12401797,Resend service starts.
2007/12/18 05:01:44,-12485765,Rescan service starts.
2007/12/18 05:01:46,-12145441,Scan: Virus Scan Engine <8.5.1001> Virus
Pattern <4.893.00> Spyware Pattern <0.569.00> IntelliTrap Black Pattern
<0.107.00> IntelliTrap White Pattern <0.249.00>
2007/12/18 05:01:46,-12145435,HTTP : Virus Scan Engine <8.5.0.1001>
Virus Pattern <4.893.00> Spyware Pattern <0.569.00> Loaded
2007/12/18 05:01:48,-12128853,Control Manager Agent: Initializing\,
please wait...
2007/12/18 05:01:48,-12128853,Control Manager Agent: Registration to
ISVW successful.
2007/12/18 05:01:48,-12145441,Scan: Spam Engine <5.0.0.1023> Pattern
<15522001> Loaded.
Reply to: