Rob MacGregor wrote:
On 1/30/06, Rajkumar S <[EMAIL PROTECTED]> wrote:
Just wondering how far a signature can go? Does the scanner needs to go back
and forth in
a file for scanning or can it scan a stream as it passes by? How far does it
needs to go
if it has to go backwards? What about zip files? Do they need to be unzipped
before
scanning ?
The idea is to have a small packet queue where last n packets are stored,
scanned and then
transmitted in a cyclic fashion. ie first n-1 packets will just gets queued,
when the nth
packet arrives, the queue is scanned, and 1st packet is released and nth
packets is
appended to the queue. This process is repeated for every packet.
What about out of order packets? What about duplicates...?
What about tar files? What about zip files?
dp
_______________________________________________
http://lurker.clamav.net/list/clamav-users.html
