Andreas,
> I use now this to get the virusname only:
> qr/ALERT: (?:.* <<< )?(.+?)(?: ; |$)/m
>
> ... a partial copy from the savapi definition in amavisd.conf :-)
Thanks! Will update my entry. I wonder whether the "FUND"
alternativce is still needed. Probably a localized text.
To stay on the safe side, I'll keep it, unless told otherwise:
### Avira for UNIX 3.x
['Avira AntiVir', ['avscan'],
'-s --batch --alert-action=none {}', [0,4], qr/(?:ALERT|FUND):/m,
qr/(?:ALERT|FUND): (?:.* <<< )?(.+?)(?: ; |$)/m ],
Mark
------------------------------------------------------------------------------
The modern datacenter depends on network connectivity to access resources
and provide services. The best practices for maximizing a physical server's
connectivity to a physical network are well understood - see how these
rules translate into the virtual world?
http://p.sf.net/sfu/oracle-sfdevnlfb
_______________________________________________
AMaViS-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/amavis-user
Please visit http://www.ijs.si/software/amavisd/ regularly
For administrativa requests please send email to rainer at openantivirus dot
org