Virus Statistics

[Brian May]

Dan, all..

    Here is a patch to include F-secure...  since Ihave both McAfee
and -fsecure's scanners...

*** MailScanner-VIRI    Sun Feb 23 15:16:44 2003
--- MailScanner-VIRI.new        Tue Feb 25 10:08:55 2003
***************
*** 45,50 ****
--- 45,51 ----
  while ( $Line = <LOG> ) {
        #Find lines containing virus reported
        chomp $Line;
+       # Mcafee
        if ( $Line =~ /Found the (.*) virus/i ) {

                # Create an array of those lines
***************
*** 62,67 ****
--- 63,79 ----
                        $frequency{$word}++;
                }
        }
+       # F-secure
+       # MailScanner line looks like this: * F-Secure found virus
W32/Klez.H at mm
+         if ( $Line =~ /F-Secure found virus (.*)/i ) {
+               #print "found $1\n";
+                       # if it's unknown assign a new index
+               if(!exists($index{$1})){
+                               $index{$1} = $nwords++;
+                       }
+                       # always update the frequency
+                       $frequency{$1}++;
+         }
  }

  my %hash;
--------------------------------------------------
----- Original Message -----
From: "Daniel Bird" <dbird at SGHMS.AC.UK>
To: <MAILSCANNER at JISCMAIL.AC.UK>
Sent: Monday, February 24, 2003 5:58 PM
Subject: Re: Virus Statistics


Raymond Dijkxhoorn wrote:

>Hi!
>
>
>
>>>http://staff.cie.uce.ac.uk/~dwhile/mailstats/
>>>
>>>
>>I noticed that the names of the virusses found are not listed in the
>>logfile, so its a little hard for this script to extract the numbers :)
>>Is this f-prot related that i dont get a those ?
>>
>>
>
>Working now, my mistake:
>
>Virus Count (Last 10 mins)
>W32/Klez.H at mm  9 (9)
>W32/Sobig.A at mm  1 (1)
>
>Bye,
>Raymond.
>
>
>
Dear all,
As regards my previous post about virus stats, I have knocked up a
little perl script (if you can call it that ! ;-) to do what I was
asking/looking for.

It's available at:
http://mailgate.khamaroad.com/tools/

Please feel free to slate the code, I not a programmer!  :-)

Dan



--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.