On 2. jun. 2014 13.36.42 CEST, Andreas Schulze <andreas.schu...@datev.de> wrote:
>Hello,
>
>we are creating signatures mostly using procedures described in
>~clamav-src/docs/signatures.pdf
>The resulting files *.hdb, *ign2, *db are copied to a clamav datadir
>and used by clamav.
>Thats fine.
>
>As far as I understand I could combine these files to a custom CVD.
>For that reason I tried this procedure:
>
>$ install -d /tmp/testing && cd /tmp/testing
>$ echo testing > COPYING
>
>$ sigtool --md5 /etc/issue > issue.hdb

use --build=issue.cud then

build is only include files based on basename

and you tryed load db.* in next line

retry and see it works

note the issue.info file when created

thanks for helping me solve it

>
>$ cat issue.hdb
>174fd67875b42f41746ea8ae50f9b4b7:28:issue
>
>$ install -d out
>
>$ SIGNDUSER=me sigtool --unsigned --datadir=. --build out/db.cud
>--max-bad-sigs 0 --cvd-version 1
>WARNING: build: Signatures in out/db db files: 0, loaded by libclamav:
>1
>LibClamAV Error: cl_cvdhead: Can't open file ./out/db.cud
>Version number: Total sigs: 1
>New sigs: 1
>Created out/db.cud
>
>$ sigtool --unsigned --info out/db.cud
>File: out/db.cud
>Build time: 02 Jun 2014 13:20 +0200
>Version: 1
>Signatures: 1
>Functionality level: 77
>Builder: me
>Verification: Unsigned container
>
>... looks good, but I cannot use the file:
>
>$ clamscan --database=out/ /etc/issue
>LibClamAV Error: cli_tgzload: Slash separators are not allowed in CVD
>LibClamAV Error: Can't load out/db.cud: Malformed database
>LibClamAV Error: cli_loaddbdir(): error loading database out/db.cud
>ERROR: Malformed database
>
>----------- SCAN SUMMARY -----------
>Known viruses: 0
>Engine version: 0.98.4-rc1
>Scanned directories: 0
>Scanned files: 0
>Infected files: 0
>Data scanned: 0.00 MB
>Data read: 0.00 MB (ratio 0.00:1)
>Time: 0.002 sec (0 m 0 s)
>
>
>what's wrong here ????
>
>Btw: could someone explain the difference between cvd, cld and cud ?
>
>Thanks,
>Andreas

-- 
Sendt fra min Android telefon med K-9 Mail. Undskyld hvis jeg er lidt 
kortfattet.
_______________________________________________
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq
http://www.clamav.net/support/ml

Reply via email to