Andreas,

> I use now this to get the virusname only:
>     qr/ALERT: (?:.* <<< )?(.+?)(?: ; |$)/m
> 
> ... a partial copy from the savapi definition in amavisd.conf :-)

Thanks! Will update my entry. I wonder whether the "FUND"
alternativce is still needed. Probably a localized text.
To stay on the safe side, I'll keep it, unless told otherwise:

  ### Avira for UNIX 3.x
  ['Avira AntiVir', ['avscan'],
   '-s --batch --alert-action=none {}', [0,4], qr/(?:ALERT|FUND):/m,
   qr/(?:ALERT|FUND): (?:.* <<< )?(.+?)(?: ; |$)/m ],



Mark

------------------------------------------------------------------------------
The modern datacenter depends on network connectivity to access resources
and provide services. The best practices for maximizing a physical server's
connectivity to a physical network are well understood - see how these
rules translate into the virtual world? 
http://p.sf.net/sfu/oracle-sfdevnlfb
_______________________________________________
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net 
https://lists.sourceforge.net/lists/listinfo/amavis-user 
 Please visit http://www.ijs.si/software/amavisd/ regularly
 For administrativa requests please send email to rainer at openantivirus dot 
org

Reply via email to