Depending if a message content category has been cached or not, amavis alternates the log it sends:
First hit: # amavis[30689]: (30689-14) Blocked INFECTED (310, Eicar-Test-Signature), [192.168.50.162] [192.168.50.162] <virus-sen...@example.org> -> <virus-r...@works.com>, quarantine: L/virus-L2pjxyYgIrRe, mail_id: L2pjxyYgIrRe, Hits: -, size: 1072, 118 ms Cached hit: # amavis[11257]: (11257-01) Blocked INFECTED (Eicar-Test-Signature(44d88612fea8a8f36de82e1278abb02f:68)), LO Would it be possible to _harmonize_ the log output and have the cache reference more isolated like this: # amavis[30689]: (30689-14) Blocked INFECTED (Eicar-Test-Signature), [192.168.50.162] [192.168.50.162] <virus-sen...@example.org> -> <virus-r...@works.com>, quarantine: L/virus-L2pjxyYgIrRe, mail_id: L2pjxyYgIrRe, Hits: -, size: 1072, 118 ms # amavis[11257]: (11257-01) Blocked INFECTED (Eicar-Test-Signature), Cache ID (44d88612fea8a8f36de82e1278abb02f:68)), LO p...@rick P.S. I know I can patch amavis, but I'd rather 'fix' this upstream (if there's enough interest...). -- state of mind Digitale Kommunikation http://www.state-of-mind.de Franziskanerstraße 15 Telefon +49 89 3090 4664 81669 München Telefax +49 89 3090 4666 Amtsgericht München Partnerschaftsregister PR 563 ------------------------------------------------------------------------------ Beautiful is writing same markup. Internet Explorer 9 supports standards for HTML5, CSS3, SVG 1.1, ECMAScript5, and DOM L2 & L3. Spend less time writing and rewriting code and more time creating great experiences on the web. Be a part of the beta today http://p.sf.net/sfu/msIE9-sfdev2dev _______________________________________________ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user Please visit http://www.ijs.si/software/amavisd/ regularly For administrativa requests please send email to rainer at openantivirus dot org