Panda not working

Steen, Glenn Glenn.Steen at AP1.SE
Wed Mar 9 17:56:58 GMT 2005


    [ The following text is in the "iso-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

Paul, could you try this panda-wrapper?
Think I got something right this time, although it still is a terrible kludge:).
Testing on my system got hold of Eicar at least...:).

-- Glenn

> -----Original Message-----
> From: MailScanner mailing list 
> [mailto:MAILSCANNER at JISCMAIL.AC.UK] On Behalf Of Steen, Glenn
> Sent: den 9 mars 2005 17:32
> To: MAILSCANNER at JISCMAIL.AC.UK
> Subject: Re: Panda not working
> 
> 
> > -----Original Message-----
> > From: MailScanner mailing list 
> > [mailto:MAILSCANNER at JISCMAIL.AC.UK] On Behalf Of Paul Welsh
> > Sent: den 8 mars 2005 22:47
> > To: MAILSCANNER at JISCMAIL.AC.UK
> > Subject: Re: Panda not working
> > 
> > 
> > > -----Original Message-----
> > > From: MailScanner mailing list 
> > > [mailto:MAILSCANNER at JISCMAIL.AC.UK] On Behalf Of Steen, Glenn
> > > Sent: 08 March 2005 11:56
> > > To: MAILSCANNER at JISCMAIL.AC.UK
> > > Subject: Re: Panda not working
> > > 
> > > 
> > > Interresting.... I'm testing with the "free" version rpm.
> > > 
> > > Some info and runs:
> > > # rpm -qi pavcl
> > > Name        : pavcl                        Relocations: (not 
> > > relocatable)
> > > Version     : 7.01.00                           Vendor: (none)
> > > Release     : 1                             Build Date: ons 
> > > 11 aug 2004 13.37.00
> > > Install Date: mån  7 mar 2005 15.24.09      Build Host: spd
> > > Group       : Applications/System           Source RPM: 
> > > pavcl-7.01.00-1.src.rpm
> > > Size        : 8964781                          License: Panda 
> > > Sowftware International
> > > Signature   : (none)
> > > Summary     : Panda Antivirus for Linux 7.01.00.0004
> > 
> > Here's the "current" version of pavcl from the registered 
> > users section of
> > Panda's site
> > http://enterprises.pandasoftware.com/acs/software/secure/pavcl
> > /pavcl_linux_i
> > 386.rpm
> > 
> > # rpm -qi pavcl
> > Name        : pavcl                        Relocations: 
> (not relocateable)
> > Version     : 7.0                               Vendor: (none)
> > Release     : 1                             Build Date: Tue 
> 01 Jul 2003
> > 07:57:05 BST
> > Install Date: Tue 08 Mar 2005 20:47:22 GMT      Build Host: spd
> > Group       : Applications/System           Source RPM: 
> pavcl-7.0-1.src.rpm
> > Size        : 5145014                          License: 
> Panda Sowftware
> > International
> > Signature   : (none)
> > Summary     : Panda Antivirus for Linux 7.0
> So the "free" version is newer than the "eval" or "buy" version.
> Go figure...
> 
> > 
> > Anyow, it doesn't work with MailScanner.  No viruses were 
> found by Panda
> > today.  F-Prot and Bitdefender found 126 each and ClamAV 133.
> Is this with the orinal panda-wrapper, or with my kludge? Is 
> it with the
> latest sigs?
> My kludge wouldn't work, since ProcessPandaOutput assumes a 
> lot about the
> output from panda-wrapper, and ... well, it might be wrong:-).
> 
> The old wrapper-script _should_ work within MS (Test it out 
> with an Eicar).
> 
> > 
> > One other point.  Yesterday you advised testing it with the 
> -HEU option in
> > order to "Activate heuristic detection method".  I delete 
> viruses so isn't
> > using heuristic detection a bit dangerous?
> Oh, sorry. I quarantine, so didn't think of the possibility.
> 
> > 
> > I must say, I'm getting rather tired of Panda...
> Wellcome to the club:-).
> 
> I'm been tinkering a bit with the old script, to make it able 
> to function
> outside MS (both /path/to/file_or_dir and ../path_or_file), 
> but it's not
> quite ready yet. Should be sometime tomorrow, if my brain 
> unsnarls ...:)
> 
> -- Glenn
> 
> ------------------------ MailScanner list ------------------------
> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> 'leave mailscanner' in the body of the email.
> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
> 
> Support MailScanner development - buy the book off the website!
> 

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!

    [ Part 2, "panda-wrapper"  Application/OCTET-STREAM (Name: ]
    [ "panda-wrapper")  2.7KB. ]
    [ Unable to print this part. ]




More information about the MailScanner mailing list