Very close.  The 49192 number is for the version of (now defunct) 
safebrowsing.cvd.

But yes, if they're able to access DNS and compare the version of 
daily/main/bytecode with what is in the DNS record then that will also be 
useful.

Regards,
Micah

Micah Snyder
ClamAV Development
Talos
Cisco Systems, Inc.
________________________________
From: clamav-users <clamav-users-boun...@lists.clamav.net> on behalf of 
newcomer01 via clamav-users <clamav-users@lists.clamav.net>
Sent: Monday, January 30, 2023 10:43 AM
To: ClamAV User Mailinglist <clamav-users@lists.clamav.net>
Cc: newcomer01 <newcome...@posteo.de>
Subject: Re: [clamav-users] ClamAV Private Mirror Question

additional you can do this little more complcated like me:

$(host -W "60" -t TXT "current.cvd.clamav.net")

and cut all needed informations from descriptive text

for example:

# current.cvd.clamav.net descriptive text 
"0.103.7:62:26777:1673344800:1:90:49192:333"

0.103.7 is the suggested software version
62 is version of main.cld or main.cvd
26777 is version of daily.cld or cvd
1673344800 unixdate when the files created from clamav
90 is the f-level for daily.cld or daily.cvd
49192 is probably the version of freshclam.dat (i'm not sure, but it can't 
really be anything else)
333 is the version of bytecode.cvd

Am I right Micah?

i had once found an explanation of the descriptive txt but i can't find it 
anymore


Von / From: Clamav User Mailinglist <mailto:clamav-users@lists.clamav.net>
An / To: Newcomer01 <mailto:newcome...@posteo.de>
CC / CC: Micah Snyder \(Micasnyd\) <mailto:micas...@cisco.com>, Bryan Whipkey 
<mailto:cloud81...@live.com>
Gesendet / Sent: Montag, Januar 30, 2023 um 18:33 (at 06:33 PM) +0100
Betreff / Subject: Re: [clamav-users] ClamAV Private Mirror Question
> Hello,
>
> You can use this command to print the build information which will include 
> the date it was published:
>
> |sigtool --info /path/to/database|​
>
> For example:
>
> ❯ sigtool --info /var/lib/clamav/daily.cld
> File: /var/lib/clamav/daily.cld
> Build time: 30 Jan 2023 03:24 -0500
> Version: 26797
> Signatures: 2018753
> Functionality level: 90
> Builder: raynman
> Verification OK.
>
> Is that what you're looking for?
>
> Regards,
> Micah
>
> Micah Snyder
> ClamAV Development
> Talos
> Cisco Systems, Inc.
>
> ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
> *From:* clamav-users <clamav-users-boun...@lists.clamav.net> on behalf of 
> Bryan Whipkey via clamav-users <clamav-users@lists.clamav.net>
> *Sent:* Sunday, January 29, 2023 2:01 AM
> *To:* clamav-users@lists.clamav.net <clamav-users@lists.clamav.net>
> *Cc:* Bryan Whipkey <cloud81...@live.com>
> *Subject:* [clamav-users] ClamAV Private Mirror Question
> Hello,
>
> I have setup a private mirror for ClamAV. I have pointed it to the private 
> mirror on freshclam.conf. My question is how do i test this to make sure I am 
> pulling the most up to date definitions from the private mirror to the server 
> being scanned? Thanks in advance.
>
> Sent from my iPhone. Please excuse any typos.
> _______________________________________________
>
> Manage your clamav-users mailing list subscription / unsubscribe:
> https://lists.clamav.net/mailman/listinfo/clamav-users
>
>
> Help us build a comprehensive ClamAV guide:
> https://github.com/Cisco-Talos/clamav-documentation
>
> https://docs.clamav.net/#mailing-lists-and-chat
>
> _______________________________________________
>
> Manage your clamav-users mailing list subscription / unsubscribe:
> https://lists.clamav.net/mailman/listinfo/clamav-users
>
>
> Help us build a comprehensive ClamAV guide:
> https://github.com/Cisco-Talos/clamav-documentation
>
> https://docs.clamav.net/#mailing-lists-and-chat

_______________________________________________

Manage your clamav-users mailing list subscription / unsubscribe:
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/Cisco-Talos/clamav-documentation

https://docs.clamav.net/#mailing-lists-and-chat
_______________________________________________

Manage your clamav-users mailing list subscription / unsubscribe:
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/Cisco-Talos/clamav-documentation

https://docs.clamav.net/#mailing-lists-and-chat

Reply via email to