On 7/6/2010 12:35 PM, Russ Tyndall wrote:
On Jul 6, 2010, at 12:35 PM, Nathan Gibbs wrote:
Usually all that I see are log entries like this
Jul 6 05:11:32 host clamd[30362]: /path/to/infected/file/infectedfile:
VirusName FOUND
or this
Jul 6 05:12:26 host clamd[30362]: stream: VirusName FOUND
Nothing is logged about the VirusEvent Script.
There may be a way to get that out of clamd, but I'm not sure.
So (if I understand correctly), the VirusEvent should be firing.
What is a suitable command I could use to test that this is firing? I've tried
a few things with ECHO but nothing shows up.
echo won't work. The event script is run by the clamd daemon,
which isn't attached to a terminal.
Maybe some kind've of command to drop some data into a text file or something
like that?
Yes, that should work. A typical use of the event script
would be to trigger an email message to the admin.
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml
