On Thu, 7 Aug 2008, Brandon Perry wrote: > if the text is the same every time, you can just use an MD5 sum of the > text file in qeustion.
If you want to key off specific parts of a text file, you can use "sigtool --hex-dump" to convert the text to hex and create your own signatures in a .db file. More info here: http://www.clamav.net/doc/latest/signatures.pdf Note that when using the hex-dump feature, you need to strip off the last byte (that is, the "0a"). The carriage return gets encoded when you enter text interactively, so you need to remove it. Jeffrey Moskot System Administrator [EMAIL PROTECTED] _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
