Thanks for sharing Stu. A few questions. Who programmed this? If you did, would you consider GPL or releasing it as open source?
Is there documentation and/or a license? Are there command-line switches? Please don't be offended by my inquiry. If this is something that you wrote yourself and are just being helpful to the Imail/declude community by sharing, it is greatly appreciated; however, considering what has happened in the last couple years regarding exploits and cracker activity, trust is very important these days. It's just that I do not know where this program came from and the installer worries me. On a currently patched and maintained system it reports that system files are out-of-date and wants to overwrite files. I would never install a program that wishes to overwrite system files and has no help files, software license, contact/support info, etc. If you don't have the time or interest in documenting and licensing your software, can you share the logic that you are using to parse the logs with from your source code? Best regards, Jeff -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of [EMAIL PROTECTED] Sent: Tuesday, November 27, 2001 4:42 PM To: [EMAIL PROTECTED] Subject: [Declude.Virus] DSN:Virus Log File Analyzer A quick and dirty Virus Log Analyzer is available at http://www.csonline.net/imailstuff/Virusanalyzer.zip You can select single or multiple the log files and can select the location for the summary file to be saved to. This is nothing fancy. Below is a sample output. This was run on a log file where the Deculde loglevel is set to MID. Virus Log Analyzer Report Date: 11/12/2001 8:27:17 AM Source Files: ******************************************* vir1103.log ********************************************************* Scan Summary -------------------------------------------- Total Emails Scanned = 91,268 Total Emails Clean = 88,463 Total Emails Infected= 2,805 Virus Summary ------------------------------------------- Count= 1,835 Virus Name= W95/Hybris.worm.B Count= 822 Virus Name= W95/Sircam.worm@mm Count= 136 Virus Name= W95/Magistr.28672@mm Count= 4 Virus Name= JS/Kak.A@m Count= 4 Virus Name= W95/Hybris.worm.D Count= 2 Virus Name= W95/MTX.9244.worm.A Count= 1 Virus Name= Virus=: W95/Magistr.28672@mm Count= 1 Virus Name= W95/Hybris.worm.C Stu > >We installed Declude Virus yesterday without any major problems (the demo of >F-Prot is not upgradable to the newest definition files... and we had to >wait for the key to arrive today). > >In the last 3 hours, Declude has intercepted 732 virus attachements! > >Has anyone written a log analyzer to sumarize what is scanned and blocked at >the end of the day? > > >Sheldon > > >Sheldon Koehler, Owner/Partner http://www.tenforward.com >Ten Forward Communications E-Commerce that makes sense! >360-457-9023 http://store.tenforward.com > >"Whenever you find yourself on the side of the majority, it's time >to pause and reflect." Mark Twain > > ---------------------------------------------------------------------------- - CSOnline Technical Support hours - Monday thru Saturday 7am - 1am CSOnline Technical Support Numbers Seneca 814-677-2447 Clarion 814-227-3638 Meadville 814-425-1696 Parker 724-399-1158 http://www.csonline.net http://www.cshowcase.com http://www.learncenter.com ---------------------------------------------------------------------------- - This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
