Feature concept... "noisy viruses"?

[Samuel Luxford-Watts]

Or if you just have one host and run sophos this works (it aint pretty
tho!):

zgrep "Virus '.*' found" /var/log/mail* | sed "s/[^']*//" | sed "s/found
.*//" | sort | uniq -c | sort -n


-----Original Message-----
From: Tony Finch [mailto:dot at DOTAT.AT]
Sent: 18 February 2004 20:04
To: MAILSCANNER at JISCMAIL.AC.UK
Subject: Re: Feature concept... "noisy viruses"?


Craig Daters <craig at WESTPRESS.COM> wrote:
>How are you guys generating these lists, where is the info coming from?

for host in a b c d e f
do      ssh $host zgrep "'McAfee said.*!!!'" /spool/MailScanner/log/maillog*
done | sed 's/[^"]*//' | sort | uniq -c | sort -n

Tony.
--
f.a.n.finch  <dot at dotat.at>  http://dotat.at/
LUNDY FASTNET: EAST BACKING NORTHEAST 3 OR 4, OCCASIONALLY 5. FAIR. GOOD.

--------------
Winckworth Sherwood Solicitors and Parliamentary Agents
DX 148400 WESTMINSTER 5 : 35 Great Peter Street, London SW1P 3LR
Telephone 020 7593 5000 Fax 020 7593 5099

-Confidentiality-
This email message and any attachments are confidential; they may be subject to legal professional privilege and are intended for the named recipient only. If you are not the named recipient, please return the message and enclosures immediately and delete them from your system.

-Caution-
Before advice received only by email (whether by attachment or otherwise) may be relied on, the authenticity of the communication must be verified by means independent of email.

-Regulation-
The firm is regulated by the Law Society.

-Partners-
A list of partners is available for inspection at each office of the firm and on the firm's website at http://www.winckworths.co.uk