On Thu, Jan 26, 2006 at 01:09:28PM +0100, Diego d'Ambra wrote:
> Erik Corry wrote:
> >On Thu, Jan 26, 2006 at 11:50:00AM +0100, Erik Corry wrote:
> > >
> > > How about:
> > >
> > > 
> >JS.Feebs-C.variant-ec:3:*:756e6573636170652822(253636|66)(253735|75)(25363e|6e)(253633|63)*(253237|27)(253237|27)(25323c|2c)??(25323c|2c)??(25323c|2c)??(25323c|2c)
> >
> >Sheesh, this sig making stuff isn't as simple as it looks :-)
> >That didn't work well at all!
> >
> >JS.Feebs-C.variant-ec:3:*:756e6573636170652822(253636|66)(253735|75)(253645|6e)(253633|63)
> >
> 
> Bingo, matches every variant.
> 
> I believe adding a match for e.g. <=((?+1)%??-1);> and possible 

Is this syntax documented?  It doesn't look like the syntax documented in
the signatures.pdf file from the clamav web site.

-- 
Erik Corry       In this way the infinite-dimensional invariance group erodes
[EMAIL PROTECTED]   the distinction between observer and observed; the pi of 
Euclid
                 and the G of Newton, formerly thought to be constant and
                 universal, are now perceived in their ineluctable historicity;
_______________________________________________
http://lurker.clamav.net/list/clamav-users.html

Reply via email to