On Wed, Feb 13, 2013 at 9:32 PM, Kaushik Vaidyanathan < kvaid...@andrew.cmu.edu> wrote:
> Hi > > Do the FileSize field in a HDB signature serve any purpose during pattern > matching, or pattern matching relies only on the MD5 checksum? > > File size serves the purpose of making sure we are looking at the right file. > Similarly for the MDB signature whats the role of PESectionSize in pattern > matching? Does PESectionSize get used while filtering and/or preprocessing > during the pattern matching? > > Same as above. > I have read through the signatures document and could not figure this out? > Do you have to step through the code to understand this? > > Unfortunately, there is no such documentation at this time. The code is your friend :-) Is there notes/document which specifies the different types of > filtering(AC, Wu-Manber, Bloom Filters) and preprocessing ClamAV does on > the input file before proceeding to the exact match? If not any suggestions > on how I could figure this out quickly from the source code? > > If this question is not suitable for this list, where should I post this > question? > > Thank you! > _______________________________________________ > Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net > http://www.clamav.net/support/ml > - Alain _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
