On Saturday 26 May 2007 11:07 pm, Chris wrote:
> The rest of the line is "on 1 May". I run a perl script nightly that
> reports several things including the total number of signatures. On 30
> April it reported there were:
>
> --------------------------------------------------------
> Total viruses detected 9,998
> Total Database Signatures 113,729
> --------------------------------------------------------
>
> On 1 May however it reported:
>
> --------------------------------------------------------
> Total viruses detected 10,021
> Total Database Signatures 9,364
>
> On 30 April my freshclam log shows:
>
> --------------------------------------
> Current working dir is /var/lib/clamav
> Max retries == 5
> ClamAV update process started at Mon Apr 30 23:44:42 2007
> Querying current.cvd.clamav.net
> TTL: 900
> Software version from DNS: 0.90.2
> main.cvd version from DNS: 43
> main.inc is up to date (version: 43, sigs: 104500, f-level: 14, builder:
> sven) daily.cvd version from DNS: 3186
> daily.inc is up to date (version: 3186, sigs: 9229, f-level: 15, builder:
> ccordes)
> --------------------------------------
>
> On 1 May it shows:
>
> --------------------------------------
> Current working dir is /var/lib/clamav
> Max retries == 5
> ClamAV update process started at Tue May 1 23:07:52 2007
> Querying current.cvd.clamav.net
> TTL: 900
> Software version from DNS: 0.90.2
> main.cvd version from DNS: 43
> main.inc is up to date (version: 43, sigs: 104500, f-level: 14, builder:
> sven) daily.cvd version from DNS: 3191
> daily.inc is up to date (version: 3191, sigs: 9364, f-level: 15, builder:
> ccordes)
> --------------------------------------
>
> I didn't write the script and not much on perl but I see no reason why
> suddenly it would quit reporting the total number of signatures versus just
> reporting the daily.cvd number. The clamstats.pl script is located here:
>
> http://mediasafe.embarq.com/chris1948/Hosted/clamstats.pl
try replacing (line 76)
if (/main\.cvd.+\(version:\s(\d+),\ssigs:\s(\d+),/) {
with
if (/main\.cvd.+\(version:\s+(\d+),\s+sigs:\s+(\d+),/) {
and
if (/daily\.(?:cvd|inc).+\(version:\s(\d+),\ssigs:\s(\d+),/) {
with
if (/daily\.(?:cvd|inc).+\(version:\s+(\d+),\s+sigs:\s+(\d+),/) {
this will allow "one or more whitespace" rather than just one, making the
script a bit more flexible. Whitespace has a way of sneaking in somehow.
>
> Nothing in the script or as far as I can see in the freshclam log between
> 30 April and 1 May. Someone else may see something I've missed.
>
> Thanks
> Chris
--
-----------------
Bob Hutchinson
Midwales dot com
-----------------
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html
