On Thu, 11 Mar 2004 09:18:00 -0700 "Brad Morgan" <[EMAIL PROTECTED]> wrote:
> So as you can see, I'd like Declude to parse the output and capture
> the virus name. Declude support tells me there's a "standard" format
> for the report output and ClamAV doesn't adhere to the "standard".
> AVG, F-Prot, F-Secure, Inoculan, McAfee, and Sophos do. I don't know
> where the"standard" came from yet.
Neither do I.
> If an option were added to clamscan (i.e. --declude) to change the
> output format, could that change be incorporated into the source CVS?
No, it couldn't. The output is extremely simple to parse (because virus
names don't contain colons), look at the simple example:
int main(int argc, char **argv)
{
char *out = "/some/file/with:colon: VIRUS FOUND\n", *pt;
for(pt = out + strlen(out) - 1; *pt != ':'; pt--);
pt += 2;
printf("%s", pt);
return 1;
}
> It sounds like Scott at Declude knows exactly where to make the change
> and I could probably hack up the
> rest of the necessary patches (it would be my first open source code
> contribution).
Of course you can adapt ClamAV to your needs but that changes won't be
incorporated into the main tree.
--
oo ..... Tomasz Kojm <[EMAIL PROTECTED]>
(\/)\......... http://www.ClamAV.net/gpg/tkojm.gpg
\..........._ 0DCA5A08407D5288279DB43454822DC8985A444B
//\ /\ Thu Mar 11 19:28:12 CET 2004
pgp00000.pgp
Description: PGP signature
