> From: Nels Lindquist [mailto:[EMAIL PROTECTED] > ... > Example new-style alert: > > ALERT: [Worm/Sobig.B worm] > > The relevant regexp is as follows: > > $CurrentVirusScannerMessage =~ m/ALERT: \[(\S+) virus\]/ > > I haven't had time to fix it yet, but I assume something like: > > $CurrentVirusScannerMessage =~ m/ALERT: \[(\S+) virus|worm\]/ > > would work?
I believe parentheses are necessary around the virus|worm construct, otherwise it means Something that has ALERT: [blahblah virus, or alternatively has worm] $CurrentVirusScannerMessage =~ m/ALERT: \[(\S+) (virus|worm)\]/ _______________________________________________ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang mailing list [EMAIL PROTECTED] http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
