SweepViruses.pm: minor patch to 4.29.7, for 4.30

[Julian Field]

You can't do that without changing the parser. You got away with it as you
also mistakenly changed the separator from ":: " to "::" so it didn't pick
up your change. I'll fix it for you and put it in 4.30.

At 15:32 29/04/2004, you wrote:
>Julian,
>
>Attached is a minor "diff -c" patch to /lib/MailScanner/SweepViruses.pm.
>The purpose of the patch is to change the syslog output for ClamAVmodule
>and SophosSAVI from:
>
>MailScanner[29668]: INFECTED:: W32/Bagle-AA:: (pathname)
>MailScanner[29668]: INFECTED:: Worm.Bagle.Z:: (pathname)
>
>to:
>
>MailScanner[24988]: INFECTED::SophosSAVI:: W32/Bagle-AA:: (pathname)
>MailScanner[24988]: INFECTED::ClamAVModule:: Worm.Bagle.Z:: (pathname)
>
>I would like to know which anti-virus engine caused the syslog, since
>I have perl scripts that track this stuff on a daily basis and
>different engines call the same virus by different names.
>
>Could this be rolled into the 4.30 version?
>
>This may also be applicable to other anti-virus engine logging that
>doesn't operate by way of perl APIs (I don't use any, so can't test).
>
>Jeff Earickson
>Colby College
>
>-------------------------- MailScanner list ----------------------
>To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
>For further info about MailScanner, please see the Most Asked
>Questions at    http://www.mailscanner.biz/maq/     and the archives
>at    http://www.jiscmail.ac.uk/lists/mailscanner.html
>

--
Julian Field
www.MailScanner.info
MailScanner thanks transtec Computers for their support

PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654

-------------------------- MailScanner list ----------------------
To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
Before posting, please see the Most Asked Questions at http://www.mailscanner.biz/maq/     and the archives at http://www.jiscmail.ac.uk/lists/mailscanner.html