Panda 7.0.1 and MailScanner {Scanned}

[Tony Johansson]

Can someone confirm that the panda-wrapper spawns a pavcl for each file it
scans?
Seems to have something to do with the "graphic" output the scanner
presents forcing it to scan - read the output from a file - scan, and so on.

How does this approach compare to other scanners regarding throughput with
MailScanner, memory usage and so on?

regards, Tony



On Mon, 13 Oct 2003 12:56:15 +0100, Pedro Rosa <Pedro.Rosa at SA.FC.UL.PT>
wrote:

>Hi there.
>
>Julian Field sent me the following patch (at the end of the message) to the
>panda-wrapper file.
>It works... and panda 7 seems to be a much better product then the previous
>version.
>
>As far as the autoupdate file you talk about i don't know it and i'll look
>into it, but i just ended a few minutes ago a "working" auto-update script.
>It's not ended nor optimized. Was cooked just about 10 minutes ago (it uses
>wget anda unzip).
>If you want it i'll send it to you... and i'll talk with Julian Field to
>see if he wants to put it in the Mailscanner distibution.
>
>
>----
>Here is the patch for /usr/lib/MailScanner/panda-wrapper
>
>------------------SNIP------------------
>--- panda-wrapper.orig  2003-10-06 09:03:16.000000000 +0100
>+++ panda-wrapper       2003-10-11 19:13:33.000000000 +0100
>@@ -90,9 +90,11 @@
>
>  #              print TEMP $_;
>
>-               if (/Encontrado virus:\s+((\w|\-|\_|\/)+)/) {
>+               if (/(Found virus|Encontrado virus)\s*:\s*((\w|\-|\_|\/)
>+)/) {
>+               #if (/Encontrado virus:\s+((\w|\-|\_|\/)+)/) {
>                         close SALIDA;
>-                       return $1;
>+                       #return $1;
>+                       return $2;
>                 }
>         }
>         close SALIDA;
>------------------SNIP------------------
>
>--
>Julian Field
>www.MailScanner.info
>Professional Support Services at www.MailScanner.biz
>MailScanner thanks transtec Computers for their support
>PGP footprint: EE81 D763 3DB0 0BFD E1DC  7222 11F6 5947 1415 B654
>
>------------------------------------------------
>Pedro Rosa (pedro.rosa at sa.fc.ul.pt)
>Coordenador Núcleo de Informática
>Rede Administrativa, Faculdade de Ciências
>Tel. 217500000 / ext. 25316 / Dir. 217500033
>
>
>

>                      Tony
Johansson

>                      <tony.johansson at SVENSK        To:
MAILSCANNER at JISCMAIL.AC.UK
>                      AKYRKAN.SE>
cc:
>                      Sent by: MailScanner          Subject:  Re: Panda
7.0.1 and MailScanner {Scanned}
>                      mailing
list

>
<MAILSCANNER at JISCMAIL.

>
AC.UK>

>

>

>                      13-10-2003
12:31

>                      Please respond
to

>                      MailScanner
mailing

>
list

>

>

>
>
>
>
>Was this solved in any way?
>I just recently got a panda evaluation license and downloaded pavcl 7.0.1
>which doesnt seem to work with the latest MailScanner.
>
>Also, there is a panda signature update script available at
>www.pcm.se/download/pavupdate.tar.gz , could this be made into a panda-
>autoupdate MailScanner script perhaps?
>
>regards, Tony
>
>
>
>On Mon, 6 Oct 2003 12:26:29 +0100, Pedro Rosa <pedro.rosa at SA.FC.UL.PT>
>wrote:
>
>>Hi there.
>>
>> I used to run panda anti-virus version 6.5.x with Mailscanner. Now i've
>>updated to version 7.0.1 and MailScanner can't acknowledge the virus that
>>panda really finds (i know that it finds it because it puts it on the log
>>files at /var/log/panda).
>> Maybe a wrapper problem?
>>
>>  Thanks for your help.
>
>
>
>=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
>
>SISTEMA DE ANTI-VIRUS e FILTRAGEM DE CONTEUDOS DE E-MAIL
>Nucleo de Informatica, FCUL/Rede Administrativa
>
>Esta mensagem for verificada pelo sistema de Controlo de
>Anti-Virus e Filtragem de Conteudos de mensagens de E-Mail.
>Embora nao tenha sido detectado qualquer virus no seu conteudo,
>aconselha-se atencao especial aos ficheiros em anexo que
>possam existir.
>
>=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
>
>
>
>
>
>