On Sunday 04 June 2006 6:27 pm, Stephen Gran wrote:
> On Sun, Jun 04, 2006 at 03:25:53PM -0500, Chris said:
> > On Sunday 04 June 2006 2:37 pm, Stephen Gran wrote:
> > > You're regexes (at least in the version I downloaded) are multi-line.
> >
> > When looking at the script with gedit and line breaks off, they're all
> > on the same line.
>
> This is what I see:
>
> if (/(\w+)\s(\w+)\s{1,2}(\d{1,2})\s(\d+:\d+:\d+)\s(\d)$
> .+mdefang-(\w+)\/Work\/msg-\d+-\d+\.(\w+):\s+(.+)\sFOUND/ ) {$
> ^I^I$dow = $1;$
> ^I^I$month = $2;$
> ^I^I$day = $3;$
> ^I^I$time = $4;$
> ^I^I$year = $5;$
> $id = $6;$
> $ext = $7;$
> $virus = $8;$
> } elsif (/(\w+)\s(\w+)\s{1,2}(\d{1,2})\s(\d+:\d+:\d+)\s(\d)$
> .+stream:\s(.+)\sFOUND/ ) {$
>
> If you don't have the line break before stream or mdefang, I don't know
> what to tell you. Besides that, they worked for me and should for most
> of the log arrangements I know (well, I don't know mimedefang
> particularly, but you're not reading that log).Well, I'll be, you were absolutely right Stephen, I should have been using another editor I guess. I took the .+stream and put it up after the (\d) and it works perfectly! The fix was right in front of my eyes all the time. Thank you so very much. Chris -- Chris Registered Linux User 283774 http://counter.li.org 18:48:37 up 21 days, 6:48, 1 user, load average: 0.87, 0.39, 0.19 Mandriva Linux 10.1 Official, kernel 2.6.8.1-12mdk
pgpK2K1p8b60S.pgp
Description: PGP signature
_______________________________________________ http://lurker.clamav.net/list/clamav-users.html
