On Fri, 30 Sep 2005 10:58:53 +0200 (METDST) [EMAIL PROTECTED] wrote: > Example: > Attachment contains: "this is the body of chris" > > main/daily sig: "this is the body of chris" > > custom signature: "this is the body of" > > The custom signature will be the matching one. I would like clamav to > use the custom signatures after first trying all main/daily ones. > > If a variant conataining "this is the body of mary" comes along, > the custom sig should match, which is the point of the sig in the > first > place - and not to find (by main/daily) already recognized code.
"this is the body of" is a sub-pattern of "this is the body of chris" and will be matched first. That's a crucial property of multi-pattern matching algorithms and has nothing to the order the signatures are loaded in. -- oo ..... Tomasz Kojm <[EMAIL PROTECTED]> (\/)\......... http://www.ClamAV.net/gpg/tkojm.gpg \..........._ 0DCA5A08407D5288279DB43454822DC8985A444B //\ /\ Sun Oct 2 20:17:14 EST 2005
pgpcRW22ng1vU.pgp
Description: PGP signature
_______________________________________________ http://lurker.clamav.net/list/clamav-users.html
