If your virxxxx.log files are in a different directory, then you will need
to change some paths. There are 2 sections that parse the declude log
files. The first counts the number of virus detections. Replace %spl% with
the path to your declude logfile path only in the sections below. My
comments are on lines that begin with :: and also have brackets [] around
them in the sections below and should not be in your final script. The /\
and \/ are just cheesey arrows pointing to the item to be changed. If the
section below is viewed with a fixed width font, it will be less confusing.
...<snip from usage.cmd>...
::Virus detections:
Echo.Virus Detections: >> %log%%mm%%yd%usage.log
for /f "tokens=3" %%v IN ('%sys%find /C "Virus=" %spl%vir%mm%%yd%.log') DO
SET virs=%%v
:: [replace /\ this %spl% with your
virxxxx.log path]
Echo.%virs% Viruses detected for %mm%-%yd%-%year% >> %log%%mm%%yd%usage.log
::Virus detail
::echo %day%, %mm%-%dd%-%year% yesterday: %yd%
Echo.> viri.tmp && Echo.> viri.dat
:: [replace \/ this %spl% with you
virxxxx.log path]
FOR /f "tokens=1-3" %%v IN ('%sys%find "Virus=" %spl%vir%mm%%yd%.log') DO
ECHO.%%x | %sys%find "Q" >> viri.tmp
:: [replace \/ this %spl% as well]
FOR /f "skip=1" %%j IN (viri.tmp) DO %sys%find "%%j" %spl%vir%mm%%yd%.log
>> viri.dat
%sys%find /v "D:" viri.dat | %sys%find /v "----" >> %log%%mm%%yd%usage.log
:: [replace /\ this "D:" with "----" so different paths aren't an issue]
...<snip from usage.cmd>...
I hope I haven't confused anybody more.
Best regards,
Jeff
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Serge Dergham
Sent: Thursday, December 06, 2001 5:57 PM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.Virus] MISSING_REVERSE_DNS:Imail/declude log
parser...
thanks
I can't find domain.exe, there is a domlist.exe, but no domain.exe
can someone please post a download link.
also, I have virxxxx.log files in a separate directory (not the spool
directory), should I change anything in the batch ?
----- Original Message -----
From: "Jeff Pitoniak" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Thursday, December 06, 2001 10:15 PM
Subject: RE: [Declude.Virus] MISSING_REVERSE_DNS:Imail/declude log parser...
>
> Put this usage.cmd in c:\tools (or modify paths in the scipt to match
where
> you put it)
>
> Put domain.exe in the Imail spool directory. (available on the Imail
website
> under free tools)
>
> Create a d:\logs directory for these usage logs or create your own and
> update the "log" variable in usage.cmd
>
> And finally, I installed Imail on the D:\ drive so make sure your paths
> match the script file's.
>
> Make sure that the "Task Scheduler" is set to automatic in the services
> control panel and paste this ito a command prompt to automate usage.cmd.
>
> AT 02:30 /EVERY:M,T,W,Th,F,S,Su "c:\winnt\system32\cmd.exe /c
> c:\tools\usage.cmd"
>
> (note: if you put usage.cmd somewhere else chang the AT command above to
> reflect this)
>
> Good luck.
>
> Best regards,
> Jeff
> --
> "If your only tool is a hammer, pretty soon everything starts to look like
a
> nail."-Dr. William Learner, Chiropractor
> Jeff Pitoniak - Network Administration & Security Consultant - PCE
Systems,
> Inc.
> email: [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]>
> Ph:(248)223-4888 ext.138 Fax:(248)223-4889
>
---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus". You can E-mail
[EMAIL PROTECTED] for assistance. You can visit our web
site at http://www.declude.com .
---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus". You can E-mail
[EMAIL PROTECTED] for assistance. You can visit our web
site at http://www.declude.com .
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
