Hi all,

We currently use Symantec AV (SAVFL I believe), I not certain of the product,  the rtvscand service runs and we pass it jobs via sav manualscan. If I strace the sav command I can see it talks to rtvscand via a socket. Is the communications protocol used here documented? Can I use this to replace sav with my own client. sav is very bad a reporting error codes etc and I would like to write my own. Is it possible to make rtvscand talk ICAP?

I know about ICAP and the Symantyec Scan Engine, but I believe this require us to buy a different product and I'm trying to go for least change at the moment.

Thankyou for any help you can give.