Yes, that is what I notice.
However the internal files generated by clam doesn't have that many lines.
So I am missing something here. Thanks.
On 5/10/06, Rick Macdougall <[EMAIL PROTECTED]> wrote:
Sumandra Majee wrote:
> Hello,
>
> I am new to clamav but liked it much after going thru the code. Have
couple
> of questions,
>
> 1) I believe I read somewhere that clamav has around 30,000 sigs in it's
> current database.
> However when I looked into generated files from main.dbmain.[ndb|hdb|fp]
> there were about
> 8K in main.ndb and 8k in hdb file.
>
> So what am I missing here?
>
> 2) Is there a need for more or full regular expression?
> Is it safe to assume that all virus signatures always starts with
some
> fixed literals no matter what?
> I guess the need for {} , (x|y) came because of polymorphic viruses.
Is
> that all or is there a need for
> grouping like [abc]+ (repetitive pattern)
Output from freshclam
main.cvd is up to date (version: 38, sigs: 51206, f-level: 7, builder:
tkojm)
daily.cvd is up to date (version: 1455, sigs: 3600, f-level: 8, builder:
ccordes)
So 54806 current signatures (if my end of day math is correct)
Regards,
Rick
_______________________________________________
http://lurker.clamav.net/list/clamav-devel.html
_______________________________________________
http://lurker.clamav.net/list/clamav-devel.html
