Re: Which log is right?

[Adrian Ho <aho-djb-qmail@xxxxxxx>]

On Tue, Jun 04, 2002 at 07:51:51AM +0200, Vitali Breida wrote:
> I have qmail-scanner 1.12 with TrendMicro VirusWall 3.6 - it does,
> but i see different versions of pattern file of TrendMicro VirusWall
> from 2 logs

Why are you so sure that the message that triggered this log:

> /var/spool/qmailscan/qmail-queue.log
> --
> 03/06/2002 08:52:14:1565: iscan: starting scan of directory "/var/spool/qmailscan/prezes10230871344081565"...
> 03/06/2002 08:52:14:1565: run  /etc/iscan/vscan -p/etc/iscan/ -za -a -u -nl -v /var/spool/qmailscan/prezes10230871344081565 /var/spool/qmailscan/working/new/prezes10230871344081565 2>&1
> 03/06/2002 08:52:14:1565: --output of iscan was:
> Virus Scanner v3.1, VSAPI v6.150-1001
> Trend Micro Inc. 1996,1997
>  Pattern version 291
>  Pattern number 46789
> --

is the same message that wrote this header:

> and now compare with MS Outlook log:
> --
> Received: from m.kopaczewski@ifps.org.pl by prezes by uid 0 with qmail-scanner-1.12 (iscan: v3.1/v5.300-0130/993/44798. . Clear:. Processed in 26.414306 secs); 03 Jun 2002 06:40:33 -0000
> --

I don't use the products mentioned, but I seriously doubt that their
authors are so incompetent as to not be able to print consistent version
numbers (the pattern DB version inconsistencies are esp. glaring).

The only logical conclusion I can come to is that we're talking about
/two/ separate installations here.  Read the mail headers carefully, and
correlate them with the relevant qmail logs.

-- 
Adrian Ho    Tinker, Drifter, Fixer, Bum   aho-djb-qmail@03s.net
ListArchive: <http://marc.theaimsgroup.com/?l=qmail>
Useful URLs: <http://cr.yp.to/qmail.html> <http://www.qmail.org>
             <http://www.lifewithqmail.org/> <http://qmail.faqts.com/>