On Mon, Dec 30, 2013 at 9:47 AM, 黄海涛 <hht...@126.com> wrote: > Is it rigth that the signature whose offset is farther is newer in > main.mdb (mian.cvd) or daily.mdb(daily.cvd)? > _______________________________________________ > Help us build a comprehensive ClamAV guide: > https://github.com/vrtadmin/clamav-faq > http://www.clamav.net/support/ml >
Usually, but it is not required to be. Dave R. -- --- Dave Raynor Sourcefire Vulnerability Research Team dray...@sourcefire.com _______________________________________________ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/support/ml
