[Clamav-users] Perl script for sorting log virus entries - version 0.36
Made change to account for milter logging changes in ClamAV 0.81 Enjoy, Brett Options: -h Help -f Log file -l Log type - valid types are: amavis and milter - Defaults to milter -r Show recipients -s Show senders - Milter only -c Minimum virus count for unique hosts -v Minimum virus type count -m Email report to predefined values set in this perl script -V Version For example: ./source_virus_count.pl -l amavis -f amavis/amavis.log -r -c 10 Shows a count of each virus type: Count is 16 for Worm.SomeFool.P Count is 13 for Worm.Zafi.B Count is 7 for Worm.Klez.H Count is 3 for Worm.SomeFool.Gen-1 Count is 1 for Worm.SomeFool.Q Count is 1 for Worm.SomeFool.I Count is 1 for Worm.Bagle.Gen-zippwd, Worm.Bagle.Gen-zippwd Count is 1 for Worm.Bagle.AG.2 Count is 1 for Worm.SomeFool.X Shows uniques hosts with a virus count over 10: mail.nsslawoffice.com sent the following virus's a total of 12 times: Worm.Zafi.B was transmitted 12 times. Recipient address [EMAIL PROTECTED] was seen 1 times. Recipient address [EMAIL PROTECTED] was seen 1 times. Recipient address [EMAIL PROTECTED] was seen 1 times. Recipient address [EMAIL PROTECTED] was seen 1 times. Recipient address [EMAIL PROTECTED] was seen 1 times. Recipient address [EMAIL PROTECTED] was seen 1 times. Recipient address [EMAIL PROTECTED] was seen 1 times. Recipient address [EMAIL PROTECTED] was seen 1 times. Recipient address [EMAIL PROTECTED] was seen 1 times. Recipient address [EMAIL PROTECTED] was seen 1 times. Recipient address [EMAIL PROTECTED] was seen 1 times. Recipient address [EMAIL PROTECTED] was seen 1 times. source_virus_count.pl Description: Perl program ___ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
Re: [Clamav-users] Perl script for sorting log virus entries - version 0.36
Made change to account for milter logging changes in ClamAV 0.81 Enjoy, Brett Options: -h Help -f Log file -l Log type - valid types are: amavis and milter - Defaults to milter -r Show recipients -s Show senders - Milter only -c Minimum virus count for unique hosts -v Minimum virus type count -m Email report to predefined values set in this perl script -V Version Thank You. In the heading you refer to version .36. The attached version if .35 and appears not to function on the new logs -- Ken Jones [EMAIL PROTECTED] ___ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
[Clamav-users] Perl script for sorting log virus entries - version 0.36 - Resend with correct script
Made change to account for milter logging changes in ClamAV 0.81 Enjoy, Brett Options: -h Help -f Log file -l Log type - valid types are: amavis and milter - Defaults to milter -r Show recipients -s Show senders - Milter only -c Minimum virus count for unique hosts -v Minimum virus type count -m Email report to predefined values set in this perl script -V Version For example: ./source_virus_count.pl -l amavis -f amavis/amavis.log -r -c 10 Shows a count of each virus type: Count is 16 for Worm.SomeFool.P Count is 13 for Worm.Zafi.B Count is 7 for Worm.Klez.H Count is 3 for Worm.SomeFool.Gen-1 Count is 1 for Worm.SomeFool.Q Count is 1 for Worm.SomeFool.I Count is 1 for Worm.Bagle.Gen-zippwd, Worm.Bagle.Gen-zippwd Count is 1 for Worm.Bagle.AG.2 Count is 1 for Worm.SomeFool.X Shows uniques hosts with a virus count over 10: mail.nsslawoffice.com sent the following virus's a total of 12 times: Worm.Zafi.B was transmitted 12 times. Recipient address [EMAIL PROTECTED] was seen 1 times. Recipient address [EMAIL PROTECTED] was seen 1 times. Recipient address [EMAIL PROTECTED] was seen 1 times. Recipient address [EMAIL PROTECTED] was seen 1 times. Recipient address [EMAIL PROTECTED] was seen 1 times. Recipient address [EMAIL PROTECTED] was seen 1 times. Recipient address [EMAIL PROTECTED] was seen 1 times. Recipient address [EMAIL PROTECTED] was seen 1 times. Recipient address [EMAIL PROTECTED] was seen 1 times. Recipient address [EMAIL PROTECTED] was seen 1 times. Recipient address [EMAIL PROTECTED] was seen 1 times. Recipient address [EMAIL PROTECTED] was seen 1 times. source_virus_count.pl Description: Perl program ___ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
Re: [Clamav-users] Perl script for sorting log virus entries - version 0.36
On Monday 31 January 2005 10:25, Ken Jones wrote: Made change to account for milter logging changes in ClamAV 0.81 In the heading you refer to version .36. The attached version if .35 and appears not to function on the new logs Oops... accidentally sent the .35 version. I just resent the correct version. Thanks, Brett ___ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
