On Jul 6, 2010, at 1:46 PM, Noel Jones wrote: >> What is a suitable command I could use to test that this is firing? I've >> tried a few things with ECHO but nothing shows up. >> > > echo won't work. The event script is run by the clamd daemon, which isn't > attached to a terminal. > >> Maybe some kind've of command to drop some data into a text file or >> something like that? > > Yes, that should work. A typical use of the event script would be to trigger > an email message to the admin.
Interesting, I made my VirusEvent line look like this in clamd.conf: VirusEvent /bin/cp /Library/mytestfile.txt /Library/mytestfile2.txt Then I stop and start the daemon using launchctl. Then I do a clamdscan of the folder with EICAR in it. The terminal reports it finds the EICAR. But the mytestfile is not copied. Is this a valid test? Would you expect the VirusEvent action to fire here? Thanks, Russ _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
