Re: [Clamav-users] Virus Event ?

* Nathan Gibbs wrote:
> * Tomasz Kojm wrote:
>> On Thu, 05 Nov 2009 15:14:19 -0500
>> Nathan Gibbs <nathan@cmpublishers.com> wrote:
>>
>>> Besides the Virus Name %v
>>>
>>> Are there any other details from the running scanner that can be
>>> exported to a VirusEvent Script?
>> Inside the script itself you can access $CLAM_VIRUSEVENT_VIRUSNAME
>> (== %v) and $CLAM_VIRUSEVENT_FILENAME (not directly available in
>> the config file)
>>
> I can see why
>
> $CLAM_VIRUSEVENT_FILENAME
>
> isn't available through config.
>
> Under clamscan the file returned is stream.
> Under clamdscan/clamd, one process returns the correct filename the
> other returns stream.
>
> Is that a bug or a feature?
>
>
My bad.

clamscan doesn't return anything.
clamdscan returns the filename if it can or stream.

Our internal monitor system was bouncing a test signature off the
clamd's & sabotaging my testing.
:-)

-- 
Sincerely,

Nathan Gibbs

Systems Administrator
Christ Media
http://www.cmpublishers.com


_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml