<html>
At 16:41 12/09/2002, you wrote:<br>
<blockquote type=cite class=cite cite><font face="arial" size=2 color="#0000FF">Thanks
for pointing that out for me. Pete Peters answered me the same tip 3 days
ago.</font><br>
<font face="arial" size=2 color="#0000FF">>>> Virus' line in the
UNIX Maillog comes from Mailscanner. Thats why I asked it as a
MailScanner issue and not UNIX. After all it is in the mailscanner code
to add '>>>Virus' in the UNIX SEndmail Log File. Not UNIX Itself
right?</font></blockquote><br>
Neither. It's in the output from the virus scanner engine.<br><br>
<blockquote type=cite class=cite cite> <br>
<br><br>
<font size=2>Matt Doherty<br>
IT Dept<br>
Datawatch Corp<br><br>
>>In a world without walls or fences, who needs Windows and
Gates?<<</font>
<dl><font face="tahoma" size=2>
<dd>-----Original Message-----
<dd>From:</b> Patterson S.R.
[<a href="mailto:S.R.Patterson@SOTON.AC.UK" eudora="autourl">mailto:S.R.Patterson@SOTON.AC.UK</a>]
<dd>Sent:</b> Thursday, September 12, 2002 12:20 PM
<dd>To:</b> MAILSCANNER@JISCMAIL.AC.UK
<dd>Subject:</b> Re: what are you rude?.. heres a copy of what I sent you
a week a go.try reading it<br><br>
</font><font face="arial" size=2 color="#0000FF">
<dd>Your answer is:</font>
<dd> <font face="arial" size=2 color="#0000FF">
<dd>grep '>>> Virus' maillog</font>
<dd> <font face="arial" size=2 color="#0000FF">
<dd>Note the single quotes. They stop the ">"
characters from having a meaning to the shell. Make sure you use
the ones which slope from bottom-left to top-right (or look straight
upright), NOT the ones which slope top-left to bottom-right, as they do
something completely different.</font>
<dd> <font face="arial" size=2 color="#0000FF">
<dd>This is a UNIX question, not a mailscanner question.</font><br><br>
<font size=2>
<dd>--
<dd>Steven Patterson MSci. Tel: +44 (0)2380 595810
<dd>Electronic Information Systems Support and Development
<dd>Computing Services, University of Southampton, UK.
<dd>Public PGP Key:
<a href="http://www.soton.ac.uk/~srp/pubkey.asc">http://www.soton.ac.uk/~srp/pubkey.asc</a></font>
<font face="tahoma" size=2>
<dd>-----Original Message-----
<dd>From:</b> Matt Doherty [<a href="mailto:Matthew_doherty@DATAWATCH.COM" eudora="autourl">mailto:Matthew_doherty@DATAWATCH.COM</a>]
<dd>Sent:</b> 12 September 2002 15:40
<dd>To:</b> MAILSCANNER@JISCMAIL.AC.UK
<dd>Subject:</b> what are you rude?.. heres a copy of what I sent you a week ago. try reading it<br><br>
</font><font face="arial" size=2 color="#0000FF">
<dd>such as</font>
<dd>
<dd> <br><br>
<font size=2>
<dd>Matt Doherty
<dd>IT Dept
<dd>Datawatch Corp<br><br>
<dd>>>In a world without walls or fences, who needs Windows and Gates?<<</font> <font face="tahoma" size=2>
<dd>-----Original Message-----
<dd>From:</b> Matt Doherty [<a href="mailto:Matthew_doherty@datawatch.com" eudora="autourl">mailto:Matthew_doherty@datawatch.com</a>]
<dd>Sent:</b> Monday, September 09, 2002 4:34 PM
<dd>To:</b> MailScanner mailing list
<dd>Subject:</b> RE: New release logging suggestions<br><br>
</font><font face="arial" size=2 color="#0000FF">
<dd>I would like to see some differant text in the log per email virus caught.. I grep the maillog to see how many viruses caught so far that week. For instance, I currently tried 'tail -2000 /var/log/maillog | grep >>>Virus' of course the ">" symbols something that messes grep up and wont work. The only string that works best is just use the word Virus ( tail -2000 /var/log/maillog | grep Virus ) Only thing is, it shows the mailscanner restarting every four hours lines as well as the viruses caught. I cant think of anything good but maybe some weird character that is never seen in the maillog such as a & or pipe symbol? Just something that grep could sniff out easily ONLY for caught viruses. Or do you have a better solution? The Email ID to go along with it as well would be nice. for ones that were scanned and ones that were found to be infected.</font><font face="arial" size=2 color="#0000FF">
<dd>Hope that is a ok suggestion.. </font><font face="arial" size=2 color="#0000FF">
<dd>Oh well Im still a newbie anyways 8-)</font>
<dd> <br><br>
<font size=2>
<dd>Matt Doherty
<dd>IT Dept
<dd>Datawatch Corp<br><br>
<dd>>>In a world without walls or fences, who needs Windows and Gates?<<</font> <font face="tahoma" size=2>
<dd>-----Original Message-----
<dd>From:</b> Julian Field [<a href="mailto:mailscanner@ECS.SOTON.AC.UK" eudora="autourl">mailto:mailscanner@ECS.SOTON.AC.UK</a>]
<dd>Sent:</b> Monday, September 09, 2002 5:14 PM
<dd>To:</b> MAILSCANNER@JISCMAIL.AC.UK
<dd>Subject:</b> New release logging suggestions<br><br>
</font>
<dd>The new release is getting there... <br><br>
<dd>What logging would people like to see?
<dd>Anything particular that you want logged? <br><br>
<dd>Suggestions please.
<dd>--
<dd>Julian Field Teaching Systems Manager
<dd>jkf@ecs.soton.ac.uk Dept. of Electronics & Computer Science
<dd>Tel. 023 8059 2817 University of Southampton
<dd>Southampton SO17 1BJ
</dl></blockquote><br>
<div>-- </div>
<div>Julian Field Teaching Systems Manager</div>
<div>jkf@ecs.soton.ac.uk Dept. of Electronics & Computer Science</div>
<div>Tel. 023 8059 2817 University of Southampton</div>
Southampton SO17 1BJ
</html>