D A E M O N
64
64
64
64
•
3
—the
command param
substring transfers
parameters of the shared memory, where the examined
object was preplaced. The mode is used if the objects
are checked without being intermediately saved onto
the disk. In this case
the general format of the string is:
<flags>date_and_time:<switch|length|>
where:
°
|
is the character separating sections;
°
switch
is the value acquired using the
ftok()
function;
°
length
is a size of the shared memory.
!"
The value
3
is used only in the server version of the Daemon
program. 4 displays the version number.
4. Read check-results from the socket.
The results are read in 2 bytes. The low byte contains
standard exit codes or the value 0x3f (in this case the client
program must return the operation to be applied by the
daemon process to the object). The high byte contains
flags defining further operations.
The value 0x2 in the high byte means that there should be
4 bytes read containing a size of the shared memory with
the disinfected object. This value may be present only if
during the transfer the flag was switched to the value
3
(or
1)
and the exit code is 5. In this case you must open the
shared memory and rewrite the examined object from it.
The value 0x1 in the high byte means that there should be
4 bytes read (containing a size of the report buffer) and
then the buffer.
5. Delete the socket.
!"
The distribution kit includes the protocol implementation samples. In
addition to the Daemon program the package also contains Monitor,
the client program (see chapter 7).
!"
The examples and the client programs are supplied as source codes
that include a description of the methods used to call up the Daemon
program from the client software.
