----- Original Message -----
From: "Nick" <[EMAIL PROTECTED]>
> > Total messages scanned for the day and the total number of viruses
> > found for that day (not count of individual virus)?
> Correct.I have no interest in this case of an indv virus count. Just
> totals. That is what I want to feed to mrtg to get realtine graphs.
> As you probably are aware mrtg likes 2 values to graph so in this
> case I'm looking for total scanned vs virus found. [For total virus's
> I think it would have to be by individual scanner so could see how
> each AV program compares. An overall total would be helpful as well
> if possible.]
Well, here is a bit a trickery to make it a single liner:
egrep "File\(|Scanned: (Virus|Error)|Skipping" l:\virus\vir1201.log | gawk
"{print $1,$4,$5,$6}" | sed "s/\/2004 / TOTAL\n/g" | egrep "File|TOTAL" |
gawk "{print $(NF-0)}" | usort | uniq -c
Which will give you an output like:
735 INFECTED
37023 TOTAL
You will need to adjust the path info to you log files, and can manipulate
the output to your liking, but this should give you a starting point to work
with...
Bill
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus". The archives can be found
at http://www.mail-archive.com.
