It will show the total number detected and then list all of the log entries related to that detection (with LOGLEVEL MID in VIRUS.CFG it shows 4 lines for each detection)
-----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Serge Dergham Sent: Friday, December 14, 2001 12:47 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.Virus] Troubleshooting Imail/declude log parser v1.1 (usage.cmd) Hi Jeff, In the output example you give, 0 virus are detected. When there are detected viruses, will the report show the number of detcection for each type of virus ? or only the total ? thanks ----- Original Message ----- From: "Jeff Pitoniak" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Thursday, December 13, 2001 6:59 PM Subject: RE: MISSING_REVERSE_DNS:RE: [Declude.Virus] Troubleshooting Imail/declude log parser v1.1 (usage.cmd) > This script looks at Imail *and* Declude logs, hence the name "Imail/Declude > log parser." DOMLIST.EXE shows a summary of incoming and outgoing mail by > domain. > > I have configured my Imail server to record POP3 and SMTP logs to the SYSLOG > service which uses logXXXX.txt rather than to a file(sysXXXX.txt). Change > all of the places in your usage USAGE.CMD to reflect the setting you chose > when you configured these services. Only the "Log Server" or "SYSMMDD.TXT" > settings work with this script. To view these settings in the Imail > Administrator program look under > > [localhost] > [services] > [POP3] POP3 tab > Log to: > [SMTP] SMTP tab > Log to: > > This line of code you mention runs DOMLIST.EXE to create a mail usage > summary and filters the output so that the listings of incoming/outgoing > mail by domain are listed minus the DOMLIST.EXE advertising blurb below > > Domain Lister - (C) Copyright 2001 Computerized Horizons - www.declude.com > Please consider using our anti-virus and anti-spam software for IMail > servers. > > Here's an example of the email message that shows up in my inbox every > morning at 2:30am. > > ============================================================================ > ==== > From: Mail Admin [mailto:[EMAIL PROTECTED]] > Sent: Thursday, December 13, 2001 2:30 AM > To: [EMAIL PROTECTED] > Subject: Thu 12-12-2001 Mail usage/Virus report > > > Report created 2:30a 2001-12-13 by Usage(v1.1) on Imail server (for > 2001-12-12) > > > > Domain # In # Out Bytes In Bytes Out > -------------------------------------------------------------- > pcesystems.com 372 136 67803259 2262220 > needaparts.com 89 19 2327162 732767 > ford.com 0 139 0 282015 > [postmaster] 0 5 0 11228 > fordmss.com 1 1 1740 1993 > adminfslc.org 34 24 12046444 51939 > visteon.com 0 1 0 1170 > wcspcesystems.com 8 7 43296 32907 > pcesystems.net 1 0 4201409 0 > bounce.em5000.net 0 1 0 5006 > -------------------------------------------------------------- > Total: 505 333 86423310 3381245 > > > Virus Detections: > 0 Viruses detected for 12-12-2001 > > ============================================================================ > ==== > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED]]On Behalf Of Paul W. Lucido > Sent: Thursday, December 13, 2001 11:20 AM > To: [EMAIL PROTECTED] > Subject: MISSING_REVERSE_DNS:RE: [Declude.Virus] Troubleshooting > Imail/declude log parser v1.1 (usage.cmd) > > > I guess my question is, what log file are you scanning for viruses? Looking > at the following command: > %spl%DOMLIST %spl%log%mm%%yd%.txt | find /V "Domain Lister - (C) Copyright > 2001" | find /V "Please consider using our" >>%log%%mm%%yd%usage.log > this performs a domlist.exe on log1212.txt. What viruses are found in the > log####.txt file? I only have log####.txt files for the days I stopped and > started services. Is it supposed to point to a different file? > > Happy Holidays, > Paul > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED]]On Behalf Of Jeff Pitoniak > Sent: Thursday, December 13, 2001 9:22 AM > To: Declude. Virus@declude. com > Cc: Keith Yount > Subject: [Declude.Virus] Troubleshooting Imail/declude log parser v1.1 > (usage.cmd) > > > If you are having problems with this command script, the following > instructions allow you to see the output and errors of all of the commands > involved. > > Open usage.cmd in a text editor (making sure that word wrap is not turned > on) and add a colon to the 1st line of the script to disable hiding the > output of the commands involved. For example: > > :@echo off > > When you run usage.cmd, direct the output into a file so you can review the > results. For example: > > usage.cmd 1> use.log 2>&1 > > The 1> directs the normal output (called STDOUT or standard ouput) and the > 2>&1 directs the error output (called STDERR or standard error output) to a > file. > > Send me this logfile if you you don't understand what's wrong and I can help > you figure out what's not working. > > Best regards, > Jeff > > --- > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > This E-mail came from the Declude.Virus mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus". You can E-mail > [EMAIL PROTECTED] for assistance. You can visit our web > site at http://www.declude.com . > > --- > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > This E-mail came from the Declude.Virus mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus". You can E-mail > [EMAIL PROTECTED] for assistance. You can visit our web > site at http://www.declude.com . > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > This E-mail came from the Declude.Virus mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus". You can E-mail > [EMAIL PROTECTED] for assistance. You can visit our web > site at http://www.declude.com . > > --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
