匹配Python中的Regex的Popen输出

Question

我正在使用python popen执行命令并在变量中捕获结果：

av_proc = Popen(
        [
            CLAMSCAN_PATH,
            "--stdout",
            "-d",
            AV_DEFINITION_PATH,
            blob_full_path
        ],
        stderr=STDOUT,
        stdout=PIPE,
        env=av_env
        )
    communicateArray = av_proc.communicate()
    claimav_output = communicateArray[0].decode('utf-8')        
    logging.info("clamAV output {}".format(claimav_output))
    logging.info("clamAV output Type {}".format(type(claimav_output)))

印刷的日志线是：

[3/1/19 6:38:01 AM] clamAV output LibClamAV Warning: **************************************************
[3/1/19 6:38:01 AM] LibClamAV Warning: ***  The virus database is older than 7 days!  ***
[3/1/19 6:38:01 AM] LibClamAV Warning: ***   Please update it as soon as possible.    ***
[3/1/19 6:38:01 AM] LibClamAV Warning: **************************************************
[3/1/19 6:38:01 AM] /home/admin/Desktop/blob_folder/test2: Worm.Mydoom.I FOUND
[3/1/19 6:49:28 AM] clamAV output Type <class 'str'>

我的目标是在此输出中提取病毒名称，即'Worm.mydoom.i'。

输出将始终采用这种格式：

filepath：detection_name找到

我写了以下python脚本来提取检测名称：

    matchObj = re.match(r'(?<=:s)S+(?=s+FOUND)', claimav_output)
    logging.info("matchObj  Type {}".format(type(matchObj)))
    logging.info(matchObj.group())
    logging.info(matchObj)

不幸的是，这是不起作用的。有人可以将我指出我的代码中的错误。这是我在日志中看到的错误：

[3/1/19 6:38:01 AM] clamAV output Type <class 'str'>
[3/1/19 6:38:01 AM] CLAIMAV Parsing claimav output to extract any scan resullt 
[3/1/19 6:38:01 AM] matchObj  Type <class 'NoneType'>
[3/1/19 6:38:01 AM] 'NoneType' object has no attribute 'group'
[3/1/19 6:38:01 AM] Something went wrong

Answer 1

您可以使用此正则及以下等级捕获病毒名称，

(?<=:s)S+(?=s+FOUND)

演示

查看此Python代码，

import re
s = """[3/1/19 6:02:52 AM] clamAV output b'LibClamAV Warning: **************************************************nLibClamAV Warning: * The virus database is older than 7 days! nLibClamAV Warning: Please update it as soon as possible. *nLibClamAV Warning: **************************************************n/home/admin/Desktop/blob_folder/test2: Worm.Mydoom.I FOUNDnn----------- SCAN SUMMARY -----------nKnown viruses: 3832461nEngine version: 0.100.2nScanned directories: 0nScanned files: 1nInfected files: 1nData scanned: 0.02 MBnData read: 0.02 MB (ratio 1.00:1)nTime: 6.519 sec (0 m 6 s)n'
    [3/1/19 6:02:52 AM] clamAV output Type class 'bytes'"""
m = re.search(r'(?<=:s)S+(?=s+FOUND)', s)
if(m):
 print(m.group())

打印病毒名称，

Worm.Mydoom.I