Symantec CmdLine support
Thomas DuVally
thomas_duvally at BROWN.EDU
Wed Jul 10 15:25:29 IST 2002
HOLY $#!T, I think I got it......
I am now going to kiss my O'Reilly Perl books...
Now what do I do with the code (once I triple check that it does work).
Post it here, or send it to Julian?
On Wed, 2002-07-10 at 08:13, Thomas DuVally wrote:
> Ok, so I cut and pasted a few bits in the sweep.pl. The "my &Scanners
> =" just seemed to be command line options. That took a little time
> since I had to figure out how to get the scanner to print any good info.
>
> I didn't understand what "InitParser," was for, but since it didn't seem
> used by most scanners, i ignored it.
>
> Now for the big one. "ProcessOutput". I don't think I understand this
> part much. I did cut and pasted, but with only minimal success. I got
> it to detect a virus (eicar test string), but it wouldn't clean it.
> Also got errors to the console.
>
> Is every line of output passed through this one at a time? I know what
> lines are important in the output. Just two from what I figure:
>
> Infected: /PATH/TO/FILE
> Info: Virus name ( what was done to it )
>
> The rest is status and info about none infected files (symlinks, time
> taken, blah, blah)
>
> On Tue, 2002-07-09 at 17:40, Jonothon Ortiz wrote:
> > >> I REALLY want to figure this out. Would a discussion of how to
> > parse a
> > >>virus output be too much to ask for here? :)
> >
> > Yes <fleeeeeeeeeeeeeeeEEEEEEEEEEEE!> lol
> >
> > seriously, it sounds like a fun and educational idea...I know I would learn
> > a bit from a discussion like this.
> --
> Tom DuVally
> Lead Sys. Programmer
> CIS, Brown University
> p 401-863-9466
--
Tom DuVally
Lead Sys. Programmer
CIS, Brown University
p 401-863-9466
More information about the MailScanner
mailing list