On Mon, 22 Apr 2002 09:09:21 +1200 Jason Haar <[EMAIL PROTECTED]> wrote:
JH> I'd suggest changing the debug statement to:
JH>
JH> sub debug {
JH> print LOG "$nowtime:$$:[",time,"]:",@_,"\n" if ($DEBUG);
JH> }
JH>
JH> so that you can see the current time in each debug record. Then ensure there
JH> are calls to debug at the beginning and end of each section you want to
JH> monitor (esp: the AV scanner - I don't trust it saying "1 sec"! ;-)
I just changed sub debug:
22/04/2002 00:53:32:13867:[1019429612]:+++ starting debugging for process 13867
by uid=16 at 22/04/2002 00:53:32
22/04/2002 00:53:32:13867:[1019429612]:setting UID to EUID so subprocesses can access
files generated by this script
22/04/2002 00:53:32:13867:[1019429612]:program name is qmail-scanner-queue.pl
22/04/2002 00:53:32:13867:[1019429612]:incoming SMTP connection from via smtp from
192.168.5.1
22/04/2002 00:53:32:13867:[1019429612]:w_c: mkdir
/var/spool/qmailscan/fw.autoukis.lt101942961240413867
22/04/2002 00:53:32:13867:[1019429612]:w_c: start dumping incoming msg into
/var/spool/qmailscan/working/tmp/fw.autoukis.lt101942961240413867 [1019429612.4815]
22/04/2002 00:53:32:13867:[1019429824]:w_c: rename new msg from
/var/spool/qmailscan/working/tmp/fw.autoukis.lt101942961240413867 to
/var/spool/qmailscan/working/new/fw.autoukis.lt101942961240413867 [1019429824.27518]
22/04/2002 00:53:32:13867:[1019429824]:d_m: starting /usr/local/bin/reformime
-x/var/spool/qmailscan/fw.autoukis.lt101942961240413867/
</var/spool/qmailscan/working/new/fw.autoukis.lt101942961240413867 [1019429824.27563]
22/04/2002 00:53:32:13867:[1019429824]:d_m: finished /usr/local/bin/reformime
-x/var/spool/qmailscan/fw.autoukis.lt101942961240413867/ [1019429824.61635]
22/04/2002 00:53:32:13867:[1019429824]:d_m: Checking all attachments to see if they're
MS-TNEF
22/04/2002 00:53:32:13867:[1019429824]:d_m: is
/var/spool/qmailscan/fw.autoukis.lt101942961240413867/asdfg is a TNEF file?: 256
[1019429824.61932]
22/04/2002 00:53:32:13867:[1019429824]:d_m: is
/var/spool/qmailscan/fw.autoukis.lt101942961240413867/1019429824.13872-0.fw.autoukis.lt
is a TNEF file?: 256 [1019429824.62224]
22/04/2002 00:53:32:13867:[1019429824]:d_m: Manually unpack any zip files as some
virus scanners don't do zip under Unix!
22/04/2002 00:53:32:13867:[1019429824]:p_s: starting scan of directory
"/var/spool/qmailscan/fw.autoukis.lt101942961240413867"...
22/04/2002 00:53:32:13867:[1019429824]:p_s: '.ade' = '0' = 'Access Project Extension'
22/04/2002 00:53:32:13867:[1019429824]:p_s: type is a size!
...
22/04/2002 00:53:32:13867:[1019429824]:p_s: checking asdfg against perlscanner
database...
22/04/2002 00:53:32:13867:[1019429824]:p_s: file asdfg is lowercased to asdfg and has
extension
22/04/2002 00:53:32:13867:[1019429824]:p_s: compare asdfg against perlscanner database
22/04/2002 00:53:32:13867:[1019429824]:p_s: skipping auto-generated file
1019429824.13872-0.fw.autoukis.lt
22/04/2002 00:53:32:13867:[1019429824]:p_s: finished scan of dir
"/var/spool/qmailscan/fw.autoukis.lt101942961240413867" in 0.005882 secs
22/04/2002 00:53:32:13867:[1019429824]:d_m: recursively scan the directory
/var/spool/qmailscan/fw.autoukis.lt101942961240413867/
22/04/2002 00:53:32:13867:[1019429824]:scanloop: starting scan of directory
"/var/spool/qmailscan/fw.autoukis.lt101942961240413867"...
22/04/2002 00:53:32:13867:[1019429824]:kasp: starting scan of directory
"/var/spool/qmailscan/fw.autoukis.lt101942961240413867"...
22/04/2002 00:53:32:13867:[1019429824]:run /usr/bin/kavscanner -O
/var/spool/qmailscan/fw.autoukis.lt101942961240413867
/var/spool/qmailscan/working/new/fw.autoukis.lt101942961240413867 2>&1
22/04/2002 00:53:32:13867:[1019429826]:--output of avp was:
...
Current object: /var/spool/qmailscan/fw.autoukis.lt101942961240413867
You will not be able to read the information about /dev/hda6 device.
/var/spool/qmailscan/fw.autoukis.lt101942961240413867/asdfg ok.
/var/spool/qmailscan/fw.autoukis.lt101942961240413867/1019429824.13872-0.fw.autoukis.lt
ok.
Current object: /var/spool/qmailscan/working/new/fw.autoukis.lt101942961240413867
You will not be able to read the information about /dev/hda6 device.
/var/spool/qmailscan/working/new/fw.autoukis.lt101942961240413867 archive: Mail
/var/spool/qmailscan/working/new/fw.autoukis.lt101942961240413867/[From Nerijus
Baliunas <[EMAIL PROTECTED]>][Date Mon, 22 Apr 2002 00:44:03 +0200 (EET)]/asdfg ok.
Scan
process completed.
Sector Objects : 0 Known viruses : 0
Files : 4 Virus bodies : 0
Folders : 1 Disinfected : 0
Archives : 1 Deleted : 0
Packed : 0 Warnings : 0
Suspicious : 0
Speed (Kb/sec) : 5589 Corrupted : 0
Scan time : 00:00:01 I/O Errors : 0
--
22/04/2002 00:53:32:13867:[1019429826]:kasp: finished scan of dir
"/var/spool/qmailscan/fw.autoukis.lt101942961240413867" in 1.575425 secs
22/04/2002 00:53:32:13867:[1019429826]:scanloop: finished scan of
"/var/spool/qmailscan/fw.autoukis.lt101942961240413867"...
22/04/2002 00:53:32:13867:[1019429826]:d_m: unpacking and scanning message took
1.92918 seconds
22/04/2002 00:53:32:13867:[1019429826]:unsetting QMAILQUEUE env var
22/04/2002 00:53:32:13867:[1019429826]:g_e_h: return-path is "[EMAIL PROTECTED]", recips
is "[EMAIL PROTECTED]"
22/04/2002 00:53:32:13867:[1019429826]:from=Nerijus Baliunas
<[EMAIL PROTECTED]>,subj=TEST, message-id=<[EMAIL PROTECTED]> via
smtp from 192.168.5.1
22/04/2002 00:53:32:13867:[1019429826]:q_r: fork off child into
/var/qmail/bin/qmail-queue...
22/04/2002 00:53:32:13867:[1019429826]:cleanup: /bin/rm -rf /var/spool/qmailscan
/fw.autoukis.lt101942961240413867/
/var/spool/qmailscan/working/new/fw.autoukis.lt101942961240413867
22/04/2002 00:57:06:13867:[1019429826]:all finished. Total of 214.490082 secs
Regards,
Nerijus
_______________________________________________
Qmail-scanner-general mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general
