Re: [Clamav-users] Number of Signatures

2010-09-15 Thread Török Edwin
On Tue, 14 Sep 2010 19:06:19 -0700 Al Varnell wrote: > A ClamXav user asked why there are three different totals for the > number of virus signatures. > > I was able to explain why the number on your home page differs from > the total that freshclam gives (the former does not include the > curre

[Clamav-users] Again - clamav.whitelist file

2010-09-15 Thread clamav
Hello, Let's try it again. I did not get a response last time so I will try it again not trying to insult anyone with my stupidly. I'm trying to use the whitelist file without much success. Could someone post your "clamav.whitelist" file so I can see an good example of what I should be doin

Re: [Clamav-users] Tracking false positives

2010-09-15 Thread Tomasz Kojm
On Tue, 14 Sep 2010 09:22:48 -0700 Dennis Peterson wrote: > Time tests of sigtool --find-sigs compared to grep. The output of either > sigtool or grep can be piped back in to sigtool --decode-sigs: > > $ time sigtool --find-sigs Sanesecurity.Spam.10995 > Sanesecurity.Spam.10995:4:*:46726f6d3a20{

Re: [Clamav-users] Again - clamav.whitelist file

2010-09-15 Thread Tomasz Kojm
On Wed, 15 Sep 2010 05:58:38 -0700 (PDT) cla...@pcez.com wrote: > > Hello, > > Let's try it again. I did not get a response last time so I will try it > again not trying to insult anyone with my stupidly. > > I'm trying to use the whitelist file without much success. Could someone > post your "c

Re: [Clamav-users] Again - clamav.whitelist file

2010-09-15 Thread Eric Rostetter
Quoting cla...@pcez.com: I'm trying to use the whitelist file without much success. Could someone post your "clamav.whitelist" file so I can see an good example of what I should be doing? What I did, and I've only whitelisted one signature, is to create a file called "local.ign2" in the cla

Re: [Clamav-users] Again - clamav.whitelist file

2010-09-15 Thread Dennis Peterson
On 9/15/10 5:58 AM, cla...@pcez.com wrote: Hello, Let's try it again. I did not get a response last time so I will try it again not trying to insult anyone with my stupidly. I'm trying to use the whitelist file without much success. Could someone post your "clamav.whitelist" file so I can see

Re: [Clamav-users] CLUES -- CLamAv Unified Event System

2010-09-15 Thread Török Edwin
On Tue, 14 Sep 2010 19:41:59 -0400 Nathan Gibbs wrote: > A script to handle all external events in a ClamAV installation. > > Well, almost, there is a wrapper for the messed up VirusAction also. > > http://www.cmpublishers.com/oss/ Can't open that URL. Also no replies to ping: PING www.cmpubli

Re: [Clamav-users] CLUES -- CLamAv Unified Event System

2010-09-15 Thread Bowie Bailey
On 9/15/2010 12:47 PM, Török Edwin wrote: > On Tue, 14 Sep 2010 19:41:59 -0400 > Nathan Gibbs wrote: > >> A script to handle all external events in a ClamAV installation. >> >> Well, almost, there is a wrapper for the messed up VirusAction also. >> >> http://www.cmpublishers.com/oss/ > Can't open

Re: [Clamav-users] Again - clamav.whitelist file

2010-09-15 Thread Jerry
On Wed, 15 Sep 2010 09:36:44 -0700 Dennis Peterson articulated: > Some of us see that request as a breach of etiquette as well as a > security risk. I really don't wish to publish my free pass info :) So you enter random data in the fields. T believe that the OP simply wanted to see the file str

Re: [Clamav-users] Tracking false positives

2010-09-15 Thread Dennis Peterson
On 9/15/10 7:47 AM, Tomasz Kojm wrote: On Tue, 14 Sep 2010 09:22:48 -0700 Dennis Peterson wrote: Time tests of sigtool --find-sigs compared to grep. The output of either sigtool or grep can be piped back in to sigtool --decode-sigs: $ time sigtool --find-sigs Sanesecurity.Spam.10995 Sanesecuri

Re: [Clamav-users] Again - clamav.whitelist file

2010-09-15 Thread Alain Zidouemba
In signatures.pdf (http://www.clamav.net/doc/latest/signatures.pdf) on page 16 you will find how to whitelist signatures. Thanks, -Alain ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml

Re: [Clamav-users] Tracking false positives

2010-09-15 Thread Török Edwin
On Wed, 15 Sep 2010 10:05:02 -0700 Dennis Peterson wrote: > On 9/15/10 7:47 AM, Tomasz Kojm wrote: > > On Tue, 14 Sep 2010 09:22:48 -0700 Dennis > > Peterson wrote: > > > >> Time tests of sigtool --find-sigs compared to grep. The output of > >> either sigtool or grep can be piped back in to sigto

Re: [Clamav-users] CLUES -- CLamAv Unified Event System

2010-09-15 Thread Nathan Gibbs
* Bowie Bailey wrote: > On 9/15/2010 12:47 PM, Török Edwin wrote: >> On Tue, 14 Sep 2010 19:41:59 -0400 >> Nathan Gibbs wrote: >> >>> A script to handle all external events in a ClamAV installation. >>> >>> Well, almost, there is a wrapper for the messed up VirusAction also. >>> >>> http://www.cm

Re: [Clamav-users] Tracking false positives

2010-09-15 Thread Dennis Peterson
On 9/15/10 11:15 AM, Török Edwin wrote: On Wed, 15 Sep 2010 10:05:02 -0700 Dennis Peterson wrote: On 9/15/10 7:47 AM, Tomasz Kojm wrote: On Tue, 14 Sep 2010 09:22:48 -0700 Dennis Peterson wrote: Time tests of sigtool --find-sigs compared to grep. The output of either sigtool or grep can be

Re: [Clamav-users] Again - clamav.whitelist file

2010-09-15 Thread Dennis Peterson
On 9/15/10 10:02 AM, Jerry wrote: On Wed, 15 Sep 2010 09:36:44 -0700 Dennis Peterson articulated: Some of us see that request as a breach of etiquette as well as a security risk. I really don't wish to publish my free pass info :) So you enter random data in the fields. T believe that the OP

Re: [Clamav-users] Again - clamav.whitelist file

2010-09-15 Thread Al Varnell
> Let's try it again. I did not get a response last time so I will try it > again not trying to insult anyone with my stupidly. > > I'm trying to use the whitelist file without much success. Could someone > post your "clamav.whitelist" file so I can see an good example of what I > should be doing?