>Something for the future? How about Inbound and outbound counts by domain >for those of us who use the Pro version and need/want stats on a per domain >basis. >
We run the pro version also. We have looked at this before but have stayed away from it as it may not be too accurate due to a few of the viruses forging the to: and from: addresses. For example this is a log entry for the Snow White virus that was caught. 05/08/2002 00:01:11 Qa2fb1b2 Scanner 1: Virus=: W32/Hybris.worm.B 05/08/2002 00:01:11 Qa2fb1b2 File(s) are INFECTED [3] 05/08/2002 00:01:11 Qa2fb1b2 Deleting file with virus 05/08/2002 00:01:11 Qa2fb1b2 Deleting E-mail with virus! 05/08/2002 00:01:11 Qa2fb1b2 Scanned: CONTAINS A VIRUS [MIME: 2 23288] 05/08/2002 00:01:11 Qa2fb1b2 From: <> To: ���@�05/08/2002 00:01:11 Qa2fb1b2 Subject: Snowhite and the Seven Dwarfs - The REAL story! As you can see the To: and From: probably don't exist in anyones user list :) The accuracy would vary depending on whether the virus forged the to: from: info in the log file. As others have asked I will look into some type of summary report via domain. How well it works for each may need to be taken with a grain of salt due to the address forging though. Stu At 04:28 PM 05/09/2002 -0500, you wrote: >Something for the future? How about Inbound and outbound counts by domain >for those of us who use the Pro version and need/want stats on a per domain >basis. > >Steven > >> -----Original Message----- >> From: [EMAIL PROTECTED] >> [mailto:[EMAIL PROTECTED]]On Behalf Of [EMAIL PROTECTED] >> Sent: Thursday, May 09, 2002 11:29 AM >> To: [EMAIL PROTECTED] >> Subject: [Declude.Virus] DSN:New Version of Virus Log Analyzer >> >> >> New version of the Virus Log Analyser has been posted. >> >> http://www.csonline.net/imailstuff/viruslog.htm >> >> The report will now show inbound and outbound counts for the individual >> viruses detected. >> >> Example: >> Virus Summary by Count --------------------------------------- >> >> Count Inbound/Outbound Name >> 100 90 / 10 W32/Klez.H@mm >> 150 125/ 25 W32/Hybris.worm.B >> >> >> Stu >> ------------------------------------------------------------------ >> ----------- >> CSOnline Technical Support hours - Monday thru Saturday 7am - 1am >> CSOnline Technical Support Numbers Seneca 814-677-2447 >> Clarion 814-227-3638 >> Meadville 814-425-1696 >> Parker 724-399-1158 >> http://www.csonline.net http://www.cshowcase.com >http://www.learncenter.com >---------------------------------------------------------------------------- >- > >--- >[This E-mail was scanned for viruses by Declude Virus >(http://www.declude.com)] > >This E-mail came from the Declude.Virus mailing list. To >unsubscribe, just send an E-mail to [EMAIL PROTECTED], and >type "unsubscribe Declude.Virus". You can E-mail >[EMAIL PROTECTED] for assistance. You can visit our web >site at http://www.declude.com . > >--- >[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > >This E-mail came from the Declude.Virus mailing list. To >unsubscribe, just send an E-mail to [EMAIL PROTECTED], and >type "unsubscribe Declude.Virus". You can E-mail >[EMAIL PROTECTED] for assistance. You can visit our web >site at http://www.declude.com . > > ----------------------------------------------------------------------------- CSOnline Technical Support hours - Monday thru Saturday 7am - 1am CSOnline Technical Support Numbers Seneca 814-677-2447 Clarion 814-227-3638 Meadville 814-425-1696 Parker 724-399-1158 http://www.csonline.net http://www.cshowcase.com http://www.learncenter.com ----------------------------------------------------------------------------- --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
