Thanks, I appreciate it.
On Wed, 2013-09-04 at 10:43 -0400, David Raynor wrote: > On Tue, Sep 3, 2013 at 5:57 PM, monte olvera <olve...@gmail.com> wrote: > > > I'm running clamav 0.97.3 (I know it's old, working on that) on Linux. I > > want to exclude files (via clamd) based on a regex and can't seem to > > figure out how. I can ignore paths just fine (ExcludePath ^/tmp) but I > > want to ignore all log files. I've tried many different variations of > > the following, including ones not listed and can't seem to get antying > > working. Can someone please tell me how I can scan the root filesystem > > and ignore all files appended with a ".log"? > > > > Some of what I've tried, which have all failed. > > > > ExcludePath ^*log > > ExcludePath ^.*log > > ExcludePath ^*.log > > ExcludePath ^/.*log > > ExcludePath ^/*.log > > > > > > _______________________________________________ > > Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net > > http://www.clamav.net/support/ml > > > > If you are looking to exclude files that end in ".log", here is what worked > for me: > > ExcludePath \.log$ > > 1) The backslash escapes the dot, so it is treated as a normal character to > match instead of a single-character wildcard. > 2) The $ anchors it to the end of the filename, instead of using the ^ to > anchor the pattern to the front. > > Results will look something like this from clamdscan: > > /home/testuser/examples/log.stream: OK <= ok after being scanned > /home/testuser/examples/test.stream: OK <= ok after being scanned > /home/testuser/examples/test.stream.log: Excluded <= logged at the point it > matches the exclusion > /home/testuser/examples/test.stream.log: OK <= ok because it has to report > a result, was not scanned > > Hope this helps, > > Dave R. > _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml