<HTML>
<HEAD>
<TITLE>Re: MailWatch and McAfee / Request and error</TITLE>
</HEAD>
<BODY>
<FONT FACE="Verdana">Thanks Steve!<BR>
<BR>
The command works perfect!<BR>
<BR>
Error?<BR>
My test server doesn’t have a lot of emails passing MailScanner and therefore not that much to store in the database and then for MailWatch to work with. When I tried to create graphs though “<FONT SIZE="4">Top Senders by Volume</FONT>” or “<FONT SIZE="4">Top Recipients by Quantity</FONT>” after just a few emails I got an error. Unable to create graphs. No data available. But there is! This happened until the size of the emails for an email address passed 1Mb. I get the feeling that none of the email addresses under 1Mb counts. Could that be the case?<BR>
<BR>
Request.<BR>
I’d like to be able to have a list of email addresses not to show in the graphs. Example. I have one admin account on the top 10 list. I think that this email shouldn’t be there.<BR>
<BR>
Thanks,<BR>
Daniel<BR>
<BR>
</FONT><BLOCKQUOTE><FONT COLOR="#0000FF"><FONT SIZE="2"><FONT FACE="Arial">Hi Daniel,<BR>
</FONT></FONT></FONT><FONT FACE="Verdana"> <BR>
</FONT><FONT COLOR="#0000FF"><FONT SIZE="2"><FONT FACE="Arial">This should work: define(VIRUS_REGEX, '/(.+) Found the (\S+) virus !!!/'); <BR>
</FONT></FONT></FONT><FONT FACE="Verdana"> <BR>
</FONT><FONT COLOR="#0000FF"><FONT SIZE="2"><FONT FACE="Arial">I've added it to the code for the next version.<BR>
</FONT></FONT></FONT><FONT FACE="Verdana"> <BR>
</FONT><FONT COLOR="#0000FF"><FONT SIZE="2"><FONT FACE="Arial">Kind regards,<BR>
Steve.<BR>
</FONT></FONT></FONT><FONT FACE="Verdana"><BR>
<BR>
<HR ALIGN=CENTER SIZE="3" WIDTH="100%"></FONT><FONT SIZE="2"><FONT FACE="Tahoma"><B>From:</B> Daniel Zajd [mailto:daniel@ZAJD.COM] <BR>
<B>Sent:</B> 21 June 2003 01:33<BR>
<B>To:</B> MAILSCANNER@JISCMAIL.AC.UK<BR>
</FONT></FONT><FONT FACE="Verdana"><BR>
I just have to say, Great work!!<BR>
<BR>
But I need some help. How should the expression for McAfee look like?<BR>
<BR>
The log look like this:<BR>
Jun 21 02:15:54 mail2 MailScanner[6710]: New Batch: Scanning 1 messages, 62658 bytes <BR>
Jun 21 02:15:54 mail2 MailScanner[6710]: Spam Checks: Starting <BR>
Jun 21 02:16:00 mail2 MailScanner[6710]: Virus and Content Scanning: Starting <BR>
Jun 21 02:16:03 mail2 MailScanner[6710]: McAfee said "/dev/shm/6710/h5L0FoD9006755/dr.scr" <BR>
Jun 21 02:16:03 mail2 MailScanner[6710]: McAfee said " Found the W32/Ganda@MM virus !!!" <BR>
Jun 21 02:16:03 mail2 MailScanner[6710]: /h5L0FoD9006755/dr.scr Found the W32/Ganda@MM virus !!! <BR>
Jun 21 02:16:04 mail2 MailScanner[6710]: Virus Scanning: McAfee found 1 infections <BR>
Jun 21 02:16:04 mail2 MailScanner[6710]: Virus Scanning: Found 1 viruses <BR>
Jun 21 02:16:04 mail2 MailScanner[6710]: Filename Checks: Possible virus hidden in a screensaver (dr.scr) <BR>
<BR>
And MailWatch show:<BR>
</FONT><FONT FACE="Lucida Grande"><B>Report: </B><FONT SIZE="1">/h5L0FoD9006755/dr.scr Found the W32/Ganda@MM virus !!! Windows Screensavers are often used to hide viruses (dr.scr) <BR>
</FONT></FONT><FONT FACE="Verdana"><BR>
//Daniel Zajd<BR>
Mailsystem Sweden<BR>
<BR>
--<BR>
This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the sender and delete the message from your mailbox.<BR>
<BR>
This footnote also confirms that this email message has been swept by MailScanner (www.mailscanner.info) for the presence of computer viruses.<BR>
</FONT></BLOCKQUOTE><FONT FACE="Verdana"><BR>
</FONT>
</BODY>
</HTML>