Log issue

[Carl Boberg]

Thanks thats great! But that wasnt really what I meant...
Im sorry but I wasnt clear enough.
What I meant was that the lines with:

MailScanner[1281]: [./gA8BPSU01371/eicar.zip] eicar.com^Iinfection:
EICAR_Test_File

I get one line per virus and the virus name on the same line (wich is
perfect). But the exact same lines show up again when it does rescan. Do you
see what Im getting at? Thing is that I would love to fix the log line so
that it looked something like this:

MailScanner[1281]: f-secure found [./gA8BPSU01371/eicar.zip] eicar.com
Infection: EICAR_Test_File

and the rescan line:

MailScanner[1281]: f-secure rescan found [./gA8BPSU01371/eicar.zip]
eicar.com Infection: EICAR_Test_File

or something similar...

Is this asking too much? If so can you point me to where I can fiddle around
with this myself?

Best regards
The Very Greatful Carl

> -----Original Message-----
> From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK]On
> Behalf Of Julian Field
> Sent: Friday, November 08, 2002 13:21
> To: MAILSCANNER at JISCMAIL.AC.UK
> Subject: Re: Log issue
>
>
> At 11:56 08/11/2002, you wrote:
> >Question is:
> >Is the rescan really neccessary? (Probably is a good idea)
>
> Yes. Vital.
>
> >If so, can I modify the rescan log entries somehow?
> >If not, how do I turn it off?
>
> I have changed the logging so that you will get
>          Virus Scanning: f-secure found 2 infections
> but then
>          Virus Re-scanning: f-secure found 2 infections
> so you don't get identical log entries for different things.
>
> I hope that doesn't break too many people's scripts!
>
> >First scan:
> >...
> >MailScanner[1281]: New Batch: Scanning 1 messages, 2491 bytes
> >MailScanner[1281]: Spam Checks: Starting
> >MailScanner[1281]: [./gA8BPSU01371/eicar.zip] eicar.com^Iinfection:
> >EICAR_Test_File
> >MailScanner[1281]: [./gA8BPSU01371/eicar-1.zip] eicar.com^Iinfection:
> >EICAR_Test_File
> >MailScanner[1281]: Virus Scanning: f-secure found 2 infections
> >MailScanner[1281]: Virus Scanning: Found 2 viruses
> >MailScanner[1281]: Saved infected "eicar-1.zip" to
> >/.../20021108/gA8BPSU01371
> >MailScanner[1281]: Saved infected "eicar.zip" to
> >/.../quarantine/20021108/gA8BPSU01371
> >MailScanner[1281]: Cleaned: Delivered 1 cleaned messages
> >....
> >Then Rescan:
> >....
> >MailScanner[1281]: Notices: Warned about 1 messages
> >MailScanner[1281]: Disinfection: Attempting to disinfect 1 messages
> >MailScanner[1281]: [./gA8BPSU01371/eicar.zip] eicar.com^Iinfection:
> >EICAR_Test_File
> >MailScanner[1281]: [./gA8BPSU01371/eicar-1.zip] eicar.com^Iinfection:
> >EICAR_Test_File
> >MailScanner[1281]: Virus Scanning: f-secure found 2 infections
> >MailScanner[1281]: Disinfection: Rescan found only 2 viruses
> >....
> >
> >BTW. Julian Field ROCKS!
>
> :-)
> --
> Julian Field                Teaching Systems Manager
> jkf at ecs.soton.ac.uk         Dept. of Electronics & Computer Science
> Tel. 023 8059 2817          University of Southampton
>                              Southampton SO17 1BJ
>