On Sat, Feb 17, 2007 at 07:50:37PM -0600, Chris wrote:
> Wed Feb 14 15:25:59 2007 -> stream: Html.Img.Gen013.Sanesecurity.06112900
> FOUND
> Wed Feb 14 20:55:26 2007 -> stream 1907: HTML.Phishing.Azon-17 FOUND
>
> A numeric value is placed after the word "stream". I'm not good at regex's, I
> suppose its a simple fix, would someone be kind enough to show me how to make
> the change? I think this is the line that needs editing:
>
> } elsif (/(\w+)\s(\w+)\s{1,2}(\d{1,2})\s(\d+:\d+:\d+)\s(\d+).+stream:\s(.
> +)\sFOUND/ ) {
Quick fix: turn "stream:" into "stream[\s\d]*:"
--
Jan-Pieter Cornet <[EMAIL PROTECTED]>
!! Disclamer: The addressee of this email is not the intended recipient. !!
!! This is only a test of the echelon and data retention systems. Please !!
!! archive this message indefinitely to allow verification of the logs. !!
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html
