On Sat, 2008-01-26 at 10:29 +0100, Tomasz Kojm wrote:
> On Sat, 26 Jan 2008 01:20:26 +0100
> Karsten Bräckelmann <[EMAIL PROTECTED]> wrote:
>
> > $ cat test.ndb
> > local.test:4:0:{-4096}74657374
>
> It won't work because there's no 'sub-signature' preceding the range wildcard.
> You can use a floating offset to workaround the limitation:
>
> local.test:4:0,4096:74657374
Thanks Tomasz, that works nicely. :)
Just a pity, that the sig manual doesn't mention range wirldcards at
all. Or the limitation of a preceding sub-signature to be at least 2
chars.
Anyway, now that this works -- any word on the speed impact (as per my
OP and the other sub-thread)?
guenther
--
char *t="[EMAIL PROTECTED]";
main(){ char h,m=h=*t++,*x=t+2*h,c,i,l=*x,s=0; for (i=0;i<l;i++){ i%8? c<<=1:
(c=*++x); c&128 && (s+=h); if (!(h>>=1)||!t[s+h]){ putchar(t[s]);h=m;s=0; }}}
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html
