On Thu, 24 Feb 2005 17:45:25 +0100 Willem de Groot <[EMAIL PROTECTED]> wrote:
> Hello,
>
> Is it possible to make a single signature that checks for both \n and
> \r\n? I tried using the pattern (0a|0d0a) but this "alternate"
> construction only seems to work for single bytes, not strings. ClamAV
> ignores the 0d0a part in the parentheses. Of course I could fix this
> particular sig by using the pattern {-1}0a but I'm looking for a more
> generic solution. For example, I'd also like to search for "version
> (0.9|1.0)". Is that currently possible with ClamAV signature
> definitions?
No, it isn't. More flexible expressions will be available in 0.90.
--
oo ..... Tomasz Kojm <[EMAIL PROTECTED]>
(\/)\......... http://www.ClamAV.net/gpg/tkojm.gpg
\..........._ 0DCA5A08407D5288279DB43454822DC8985A444B
//\ /\ Thu Feb 24 18:22:46 CET 2005
pgpbwrDYsoFFk.pgp
Description: PGP signature
_______________________________________________ http://lurker.clamav.net/list/clamav-users.html
