| Sophie is a daemon which uses 'libsavi' library
from Sophos anti virus vendor (
http://www.sophos.com ). On startup, Sophie
initializes SAPI (Sophos Anti-Virus Interface),
loads virus patterns into memory, opens local UNIX
domain socket, and waits for someone to connect
and instructs it which path to scan. Since the
database is loaded in RAM, scanning is very fast.
(Note: speed of scanning also depends on SAVI
settings and size of the file.) It has been
tested on Linux and Solaris (Sparc), and also
compiles on FreeBSD (not extensively tested). It
was made as a part of 'Virge' project, which is a
mail/attachment/virus scanning tool (and procmail
replacement), written in C. |