[Avcheck] Troubles upgrading AVP 135.3 to KAV 136
Robbert Kouprie
kouprie@fox-it.com
Thu, 20 Sep 2001 17:09:45 +0200
This message is in MIME format. Since your mail reader does not understand
this format, some or all of this message may not be legible.
------_=_NextPart_000_01C141E6.48AA3DF8
Content-Type: text/plain;
charset="iso-8859-1"
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Hi there,
I was wondering of someone could shed a light on this. I'm having a
little trouble upgrading from Avp 135.3 to Kav 136. I'm probably
missing some configuration option somewhere, but I really looked
everything over ten times.
The error from avp is: uexpected avp return code 70 (0x6946)
I have tested with AVPcheck (28-06) and AVcheck (v0.4) with
appropriate command line options. Both give the same result.
The 4 testcases are as follows:
1) AVPcheck (28-06) and AvpDaemon 135.3
2) AVPcheck (28-06) and kavdaemon 136
3) AVcheck (v0.4) and AvpDaemon 135.3
4) AVcheck (v0.4) and kavdaemon 136
1 & 3 succeed (although 1 silently) and 2 & 4 give the error.
radium:/usr/local/AvpLinux# ./avpcheck -b -f root -d
/var/spool/avp/./tst \ -s /var/spool/avp/ctl/AvpCtl root <
/home/robbert/avcheck_0.4/avcheck-0.4/eicar.msg -S:1025 -- robbert
radium:/usr/local/AvpLinux# ./avpcheck -b -f root -d
/var/spool/kav/./tst \ -s /var/spool/kav/ctl/AvpCtl root <
/home/robbert/avcheck_0.4/avcheck-0.4/eicar.msg -S:1025 -- robbert
avpcheck: uexpected avp return code 70 (0x6946)
radium:/usr/local/AvpLinux# ./avcheck -n -f root -d
/var/spool/avp/./tst \ -s avp:/var/spool/avp/ctl/AvpCtl root <
/home/robbert/avcheck_0.4/avcheck-0.4/eicar.msg
Message didn't pass the virus check: Infected by a virus
radium:/usr/local/AvpLinux# ./avcheck -n -f root -d
/var/spool/kav/./tst \ -s avp:/var/spool/kav/ctl/AvpCtl root <
/home/robbert/avcheck_0.4/avcheck-0.4/eicar.msg
avcheck: uexpected avp return code 70 (0x6946)
Can anyone give a hint?
Regards,
- - Robbert
Robbert Kouprie t 015 - 21 21 907
Fox-IT Forensic IT Experts f 015 - 21 21 964
Oude Delft 47 e kouprie@fox-it.com
2611 BC Delft i www.fox-it.com
-----BEGIN PGP SIGNATURE-----
Version: PGP 7.1
iQA/AwUBO6oGuUglPNMEYIVxEQK+WwCfX9Hhq/w/RKK2OoGFjWkHLqkOOXYAn2J3
FmMHq/gumpznhX21Nclvrtv2
=/YM+
-----END PGP SIGNATURE-----
------_=_NextPart_000_01C141E6.48AA3DF8
Content-Type: application/ms-tnef
Content-Transfer-Encoding: base64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------_=_NextPart_000_01C141E6.48AA3DF8--