> On Tue, 30 Jun 2009 10:28:36 -0400
> Tom Shaw <ts...@oitc.com> wrote:
>
>> Does freshclam or clam on load/reload look for and remove dup
>> signatures?
>
> No, it doesn't. This is up to the database maintainers to avoid
> duplicates.

So if, for example, the following signature:

5468697320697320612074657374207369676e61747572652e2e2e

happens to be listed in one of the "official" signature databases and
multiple 3rd party signature databases, ClamAV will load the same
signature into memory multiple times?

That seems rather inefficient and requires every 3rd party signature
writer to cross-reference every other signature writers databases, as well
as the official signature databases.  Wouldn't it be better/more efficient
for ClamAV to load duplicate signatures only once?

Bill

_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Reply via email to