Michael,
>(Email|HTML|Sanesecurity)\.(Phishing|Spear|(Spam|Scam)[a-z0-9]?)\.i=>4.6
please read the GUI section, at the bottom of the main page, again! Check
all your regexes against this description.
The syntax of this line is wrong! If you use at least one '|' in a
weighted regex, you have to use an '~' in front and at the end of the
regex !
~(Email|HTML|Sanesecurity)\.(Phishing|Spear|(Spam|Scam)[a-z0-9]?)\.i~=>4.6
This is also not perfect (but works), because $1 , $2 and $3 would normaly
be captured by Perl inside the three (..) - better change this to:
~(?:Email|HTML|Sanesecurity)\.(?:Phishing|Spear|(?:Spam|Scam)[a-z0-9]?)\.i~=>4.6
These changes are not realy needed, because assp will do this for you
(internaly) - but it helps to write good regexes.
Thomas
Von: "Michael Thomas" <[email protected]>
An: "'ASSP development mailing list'"
<[email protected]>
Datum: 04.01.2011 08:02
Betreff: [Assp-test] Bad SuspiciousVirus regex
Thomas,
I just performed an upgrade to ASSP version 2.0.2(2.0.15). First upgraded
assp.mod to latest. Then edited assp.pl per instructions and copied file
to
target. Restarted. Good restart.
While reviewing the startup in log, I noted the following:
==============================
11-Jan-04 01:34:36 [startup] Error: weighted regex for SuspiciousVirus is
invalid 'Scam)[a-z0-9]?)\.i=>4.6' - Unmatched ) in regex; marked by <--
HERE
in m/Scam) <-- HERE [a-z0-9]?)\.i/ at C:\ASSP\assp.pl line 36071.
11-Jan-04 01:34:36 [startup] Warning: value for SuspiciousVirus was not
changed - all changes are ignored
11-Jan-04 01:34:36 [startup] Info: try to use unoptimized regex
SuspiciousVirus
11-Jan-04 01:34:36 [startup] Error: weighted regex for SuspiciousVirus is
invalid 'Scam)[a-z0-9]?)\.i=>4.6' - Unmatched ) in regex; marked by <--
HERE
in m/Scam) <-- HERE [a-z0-9]?)\.i/ at C:\ASSP\assp.pl line 36071.
11-Jan-04 01:34:36 [startup] Warning: value for SuspiciousVirus was not
changed - all changes are ignored
==============================
The file, file:files/suspiciousvirus.txt is untouched by me. I think it is
complaining about nested parens in:
(Email|HTML|Sanesecurity)\.(Phishing|Spear|(Spam|Scam)[a-z0-9]?)\.i=>4.6
Michael Thomas
Mathbox
978-687-3300
Toll Free: 1-877-MATHBOX (1-877-628-4269)
------------------------------------------------------------------------------
Learn how Oracle Real Application Clusters (RAC) One Node allows customers
to consolidate database storage, standardize their database environment,
and,
should the need arise, upgrade to a full multi-node Oracle RAC database
without downtime or disruption
http://p.sf.net/sfu/oracle-sfdevnl
_______________________________________________
Assp-test mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/assp-test
DISCLAIMER:
*******************************************************
This email and any files transmitted with it may be confidential, legally
privileged and protected in law and are intended solely for the use of the
individual to whom it is addressed.
This email was multiple times scanned for viruses. There should be no
known virus in this email!
*******************************************************
------------------------------------------------------------------------------
Learn how Oracle Real Application Clusters (RAC) One Node allows customers
to consolidate database storage, standardize their database environment, and,
should the need arise, upgrade to a full multi-node Oracle RAC database
without downtime or disruption
http://p.sf.net/sfu/oracle-sfdevnl
_______________________________________________
Assp-test mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/assp-test
