> > You can look for the last colon... > > > the begining of the -l output. Can the change Scott suggested be made > > to the ClamAV source? > > Does it have to have an option added because the old format is being > > parsed by > > other programs? > > The output format won't change. Please check the 3-rd party software (on > www.clamav.net) for parsing details. > > BTW: What is "Declude Virus" ?
Sorry to hear that the output format is frozen in time. Declude Virus is one product (http://www.declude.com) produced by Computerized Horizons that interfaces with Imail (http://www.ipswitch.com), a popular (non-exchange) email server for Windows. Declude Virus provides the interface hook into the SMTP server, handles mime decoding etc., and then uses your choice of command line virus scanner(s) to do the actual virus check. If a virus is detected, Declude virus then provides the usual options for dealing with the email. One of its options is to parse the virus scan output for the name of the virus that was found and present it as an "environment type" variable for reporting in logs and in (optional) generated emails to the intended receipent, sender, local and remote postmasters, etc. A feature just recently added is the ability to check the virus name against a database of viruses that are known to forge the from address. If found in this database, then the from address is replaced by [forged] and can be used to limit who gets notified about the infected email. So as you can see, I'd like Declude to parse the output and capture the virus name. Declude support tells me there's a "standard" format for the report output and ClamAV doesn't adhere to the "standard". AVG, F-Prot, F-Secure, Inoculan, McAfee, and Sophos do. I don't know where the "standard" came from yet. If an option were added to clamscan (i.e. --declude) to change the output format, could that change be incorporated into the source CVS? It sounds like Scott at Declude knows exactly where to make the change and I could probably hack up the rest of the necessary patches (it would be my first open source code contribution). Regards, Brad Morgan ------------------------------------------------------- This SF.Net email is sponsored by: IBM Linux Tutorials Free Linux tutorial presented by Daniel Robbins, President and CEO of GenToo technologies. Learn everything from fundamentals to system administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click _______________________________________________ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
