/usr/share/logwatch/scripts/services/clamav-milter is in logwatch 7.4.1-2.
This file is owned by root:root, with mode 0o755.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 | #!/usr/bin/perl
##################################################################
#
# Written by S. Schimkat <www.schimkat.dk>.
#
# Find latest version here: www.schimkat.dk/clamav
#
##################################################################
########################################################
## Copyright (c) 2008 S. Schimkat
## Covered under the included MIT/X-Consortium License:
## http://www.opensource.org/licenses/mit-license.php
## All modifications and contributions by other persons to
## this script are assumed to have been donated to the
## Logwatch project and thus assume the above copyright
## and licensing terms. If you want to make contributions
## under your own copyright or a different license this
## must be explicitly stated in the contribution an the
## Logwatch project reserves the right to not accept such
## contributions. If you have made significant
## contributions to this script and want to claim
## copyright please contact logwatch-devel@lists.sourceforge.net.
#########################################################
$Detail = $ENV{'LOGWATCH_DETAIL_LEVEL'};
my $IgnoreUnmatched = $ENV{'clamav_ignoreunmatched'} || 0;
while (defined($ThisLine = <STDIN>)) {
if (
( $ThisLine =~ /^clamav-milter (startup|shutdown) succeeded$/ ) or
( $ThisLine =~ /^Database has changed, loading updated database/ ) or
( $ThisLine =~ /^Quarantined infected mail as/ ) or
( $ThisLine =~ /^\w+ quarantined as/ ) or
( $ThisLine =~ /^ClamAv: mi_stop/ ) or
( $ThisLine =~ m#^\/tmp\/clamav-.* .* FOUND# ) or
# These two go along with "max-children limit" so we ignore them
( $ThisLine =~ /n_children \d+: waiting \d+ seconds for some to exit/ ) or
( $ThisLine =~ /Finished waiting, n_children = \d+/ ) or
# These 3 precede "correctly reloaded" (we hope)
# - Toss-up: Keep "correctly reloaded" or "Protecting against"?
( $ThisLine =~ /^Database has changed, loading updated database/ ) or
( $ThisLine =~ /^Loaded ClamAV \d+\./ ) or
( $ThisLine =~ /^ClamAV: Protecting against \d+ viruses/ ) or
0 ) {
# We do not care about these.
} elsif (($ThisLine =~ /clean message from/)) {
$CleanMessage++;
} elsif (($ThisLine =~ /.*: (.+?) Intercepted virus/i ) or
($ThisLine =~ /Message from .* to .* infected by (.+)/)) {
$VirusList{$1}++;
} elsif (($ChildLimit) = ($ThisLine =~ /hit max-children limit \((\d+ >= \d+)\): waiting for some to exit/)) {
$MaxChildrenLimit{$ChildLimit}++;
} elsif (($ThisLine =~ /^Stopping/)) {
$DaemonStop++;
} elsif (($ThisLine =~ /^Starting/)) {
$DaemonStart++;
} elsif (($Viruses) = ($ThisLine =~ /^Database correctly reloaded \((\d+) (signatures|viruses)\)/i )) {
$DatabaseReloads++;
$DatabaseViruses = $Viruses;
} else {
$OtherList{$ThisLine}++;
}
}
if (($DaemonStop) and ($Detail >= 5)) {
print "\nDaemon stopped: " . $DaemonStop . " Time(s)\n";
}
if (($DaemonStart) and ($Detail >= 5)) {
print "\nDaemon started: " . $DaemonStart . " Time(s)\n";
}
if (($DatabaseReloads) and ($Detail >= 5)) {
print "\nVirus database reloaded $DatabaseReloads time(s) (last time with $DatabaseViruses viruses)\n";
}
if (keys %MaxChildrenLimit) {
print "\nHit max-children limit:\n";
foreach $Limit (sort {$a cmp $b} keys %MaxChildrenLimit) {
print ' Limit ' . $Limit . ' children(s) exceeded ' . $MaxChildrenLimit{$Limit} . " Time(s)\n"
}
}
if ($CleanMessage) {
print "\nClean messages: " . $CleanMessage . " Message(s)\n";
}
if (keys %VirusList) {
my $Total = 0;
print "\nInfected messages:\n";
foreach $Virus (sort {$a cmp $b} keys %VirusList) {
print ' ' . $Virus . ": ". $VirusList{$Virus} . " Message(s)\n";
$Total += $VirusList{$Virus};
}
print " Total: $Total\n";
}
if ((keys %OtherList) and (not $IgnoreUnmatched)){
print "\n**Unmatched Entries**\n";
foreach my $line (sort {$OtherList{$b}<=>$OtherList{$a} } keys %OtherList) {
print "\n $line: $OtherList{$line} Time(s)";
}
}
exit(0);
# vi: shiftwidth=3 tabstop=3 syntax=perl et
# Local Variables:
# mode: perl
# perl-indent-level: 3
# indent-tabs-mode: nil
# End:
|