A few quick answers:

- CVD: ClamAV Virus Database, signed
- CLD: ClamAV Virus Database, to which a diff update has been applied
- CUD:  ClamAV Virus Database, unsigned

Use "sigtool -u" to decompress.

Alain

On Sat, May 13, 2017 at 2:52 PM, Jörg Jenderek <joerg.jen.der...@gmx.net>
wrote:

> Hello,
> i found several file name extension for Clamav virus databases,
> but i found no official or good explanation for used extension.
>
> According to man page for freshclam.conf i expected that "cld" extension
> is used for uncompressed database and "cvd" is used for compressed
> database nowadays after update process with 2 different
> CompressLocalDatabase values. But this not always true for my expected
> examples.
> Furthermore it is not written in official documentation what
> is the meaning of uncompressed or compressed database.
> For my examples uncompressed database contains tar file and compressed
> database contains gzipped tar file. I verified this by file(1) command
> and by cutting of 512 byte header part with dd command and inspecting
> remaining parts with gz and tar command. But i do not know if this
> always or true or if other compression methods like bz2, xz can be occur.
>
> During update process when downloading database filenames like
> clamav-*.clamtmp seems to be used.
>
> According to manual clamdoc.pdf ClamAV Virus Database header is a
> 512-bytes long string with colon separated fields:
> ClamAV-VDB:build time:version:number of signatures:functionality
> level required:MD5 checksum:digital signature:builder name:build time
>
> This is true for cvd and cld files, but not for database with "cud"
> extension. Does exist an official header description for such cud files?
>
> Sorry i am not a c programmer. But when looking in source file cvd.c
> there seem to exist many more file name extension like "hdb" for
> example. So what are the meaning of such extensions used by clamav?
>
> As far as i know clamav is the only open source antivirus solution.
> So it would be nice to have mime types ( best official registered ) for
> clamav databases. But i found no mime type. So does somebody knows about
> mime type for clamav database?
>
> Thanks for hints and explanations
> Jörg Jenderek
> --
> Jörg Jenderek
>
> _______________________________________________
> clamav-users mailing list
> clamav-users@lists.clamav.net
> http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
>
>
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
>
> http://www.clamav.net/contact.html#ml
_______________________________________________
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Reply via email to