On Sun, Jun 04, 2006 at 03:25:53PM -0500, Chris said: > On Sunday 04 June 2006 2:37 pm, Stephen Gran wrote: > > You're regexes (at least in the version I downloaded) are multi-line. > > When looking at the script with gedit and line breaks off, they're all on > the same line.
This is what I see:
if (/(\w+)\s(\w+)\s{1,2}(\d{1,2})\s(\d+:\d+:\d+)\s(\d)$
.+mdefang-(\w+)\/Work\/msg-\d+-\d+\.(\w+):\s+(.+)\sFOUND/ ) {$
^I^I$dow = $1;$
^I^I$month = $2;$
^I^I$day = $3;$
^I^I$time = $4;$
^I^I$year = $5;$
$id = $6;$
$ext = $7;$
$virus = $8;$
} elsif (/(\w+)\s(\w+)\s{1,2}(\d{1,2})\s(\d+:\d+:\d+)\s(\d)$
.+stream:\s(.+)\sFOUND/ ) {$
If you don't have the line break before stream or mdefang, I don't know
what to tell you. Besides that, they worked for me and should for most
of the log arrangements I know (well, I don't know mimedefang
particularly, but you're not reading that log).
--
--------------------------------------------------------------------------
| Stephen Gran | In Blythe, California, a city ordinance |
| [EMAIL PROTECTED] | declares that a person must own at |
| http://www.lobefin.net/~steve | least two cows before he can wear |
| | cowboy boots in public. |
--------------------------------------------------------------------------
signature.asc
Description: Digital signature
_______________________________________________ http://lurker.clamav.net/list/clamav-users.html
