Logs and Stats

[Keith Chong]

I am in the process of upgrading from 3.21 to 4.20-3.  I generate a report every night which has what MailScanner and SpamAssassin as done that day.  I noticed that the virus found in fine linee comes up twice.  Here is what it looks like in my logs

Aug 25 14:53:21 develop.nac.uci.edu MailScanner[28104]: New Batch: Scanning 1 messages, 112986 bytes
Aug 25 14:53:21 develop.nac.uci.edu MailScanner[28104]: Spam Checks: Starting
Aug 25 14:53:21 develop.nac.uci.edu MailScanner[28104]: Virus and Content Scanning: Starting
Aug 25 14:53:26 develop.nac.uci.edu MailScanner[28104]: >>> Virus 'W32/Sobig-E' found in file ./h7PLrKo29532/your_details.zi/details.pif
Aug 25 14:53:26 develop.nac.uci.edu MailScanner[28104]: Virus Scanning: Sophos found 1 infections
Aug 25 14:53:26 develop.nac.uci.edu MailScanner[28104]: Virus Scanning: Found 1 viruses
Aug 25 14:53:26 develop.nac.uci.edu MailScanner[28104]: Cleaned: Delivered 1 cleaned messages
Aug 25 14:53:26 develop.nac.uci.edu MailScanner[28104]: Sender Warnings: Delivered 1 warnings to virus senders
Aug 25 14:53:26 develop.nac.uci.edu MailScanner[28104]: Disinfection: Attempting to disinfect 1 messages
Aug 25 14:53:36 develop.nac.uci.edu MailScanner[28104]: >>> Virus 'W32/Sobig-E' found in file ./h7PLrKo29532/your_details.zi/details.pif
Aug 25 14:53:36 develop.nac.uci.edu MailScanner[28104]: Virus Re-scanning: Sophos found 1 infections
Aug 25 14:53:36 develop.nac.uci.edu MailScanner[28104]: Disinfection: Rescan found only 1 viruses



Why is there second line that says Sobig was found?  We are interested in knowing how many of each virus was received each day and this make it more difficult to get an accurate number.

Thanks for your help

Keith