> > Is MD5 signature packed with CVD files ? could I force a signature test with > > a downloaded file to try to separate a download problem of another kind of > > problem ? > > Yes, 'sigtool -i main.cvd ; sigtool -i daily.cvd'. > Directly http (at avmirror2.prod.rxgsys.com/database/) downloaded files give this beautiful result:
C:\clamav-devel\bin>sigtool -i /cygdrive/c/clamav-devel/share/clamav/main.cvd Build time: 27 Jan 2004 12-31 +0100 Version: 19 # of signatures: 19987 Functionality level: 1 Builder: ddm MD5: 46b4b24055925f69a6d5d7802dbd1479 Digital signature: QwI5dHA0EuDyu+nTowuaUtj30yqEKhpbcV1o5XdkXDiRvqTYowbqh4by/Burp QOPF15XXXODL7b4jY4n9I8Kw/7gdPLwjLgeaqDUA5WRyMtZIlOJFJcCznw/ZYmkk+FQAM9URLmCe pwtL ZN9uynsUKXdmZE6SVBtk4Dkg//w5Mf Verification OK. C:\clamav-devel\bin>sigtool -i /cygdrive/c/clamav-devel/share/clamav/daily.cvd Build time: 05 Feb 2004 01-32 +0100 Version: 121 # of signatures: 637 Functionality level: 1 Builder: tomek MD5: eaaf2a25d6a0dbc16c934aaf71c3bf0f Digital signature: ivDCu1Snv8shmSMQc/F1Rgsi3qspAu6IGxBmFxPay4f2Zi2emGwi6MrSYr/a9 Ql1EYha351vChibsW+sxDwERFNgUtTaP8sphI0LpU5IP9bgBqiWOSLb6Nn+Z5OFEbYIQU+hHF8gB Uy6O ZqtYBicItHrB+og2gECzm+Tqitumzk Verification OK. C:\clamav-devel\bin> And after this 'freshclam' says that databases are updated. But if I erase anyone of the 'cvd' files the files 'freshclam' will download the file in a temp file at share/clamav. Is there anyway to catch the temp file before freshclam erases the temp ? This way I could run the sigtool over it and see if there is any corruption in downloaded file (unless freshclam uses the same sigtool to test it... in wich case the explanation is that 'freshcam' does not download the file correctly). Any ideas ? > Also, generate MD5 checksums of downloaded files and show them to us. > Usually with 'md5sum', though I don't know if your system has this > program. Haven't found any MD5 tool in Windows yes. But as sigtool grants the http download of cvd files, might we focus on the download routines ? Best regards, Ignasi Prat ------------------------------------------------------- The SF.Net email is sponsored by EclipseCon 2004 Premiere Conference on Open Tools Development and Integration See the breadth of Eclipse activity. February 3-5 in Anaheim, CA. http://www.eclipsecon.org/osdn _______________________________________________ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
