Re: [Clamav-users] how to get rid of the MD5 in .ndb sig files

2009-06-30 Thread Török Edwin
On 2009-07-01 06:32, rayeaster wrote: > hi, everyone, > > I am doing some kindof research on string match right now and I was trying > to > use ClamAV-signatures(daily.ndb and main.ndb, obtained by sigtool) as a > simulation source. > but I do not know how to retrieve the original signatures whic

[Clamav-users] how to get rid of the MD5 in .ndb sig files

2009-06-30 Thread rayeaster
hi, everyone, I am doing some kindof research on string match right now and I was trying to use ClamAV-signatures(daily.ndb and main.ndb, obtained by sigtool) as a simulation source. but I do not know how to retrieve the original signatures which are encrypted with MD5 in a file format: ndb, ri

Re: [Clamav-users] Signature dups

2009-06-30 Thread Bill Landry
Tomasz, thanks for your detailed response. I'll follow-up off-list with some of the other sig writers and see what their thoughts are on bug #781. Best regards, Bill > On Tue, 30 Jun 2009 11:26:25 -0700 > "Bill Landry" wrote: > >> So if I were to include a signature in my 3rd party database, a

Re: [Clamav-users] List bounces

2009-06-30 Thread Chuck Swiger
Hi, Tom-- On Jun 30, 2009, at 3:41 PM, Tom Shaw wrote: I have wasted my time trying to contact snigelpost.org, webnoice.se, swebase.com, wekudata.se and utfors.se who all seem to be part of the problem and who do not return emails sent to postmaster, abuse, and their whois contacts. If yo

[Clamav-users] List bounces

2009-06-30 Thread Tom Shaw
I did my due diligence and emailed clamav-users-requ...@lists.clamav.net?subject=help and got the email contact of the owner of the list and emailed clamav-users-ow...@lists.clamav.net and have received no response. Every time I post to this list I receive a "no such user here" response for c

Re: [Clamav-users] Signature dups

2009-06-30 Thread Tom Shaw
At 11:05 PM +0200 6/30/09, Tomasz Kojm wrote: On Tue, 30 Jun 2009 11:26:25 -0700 "Bill Landry" wrote: So if I were to include a signature in my 3rd party database, and then a few days later ClamAV adds the same signature to the official signature database, that is not your problem, but rath

Re: [Clamav-users] Signature dups

2009-06-30 Thread Tomasz Kojm
On Tue, 30 Jun 2009 11:26:25 -0700 "Bill Landry" wrote: > So if I were to include a signature in my 3rd party database, and then a > few days later ClamAV adds the same signature to the official signature > database, that is not your problem, but rather my problem? Seems like if > you (ClamAV) i

Re: [Clamav-users] Source signature download problem

2009-06-30 Thread Bowie Bailey
Bowie Bailey wrote: When I attempt to download the 0.95.2 source and signature from the clamav.net web page, I get a "400 Bad Request" error. It's apparently a problem with the download link to Sourceforge. I see that they have changed their site recently, so maybe that's the problem. If I

[Clamav-users] Source signature download problem

2009-06-30 Thread Bowie Bailey
When I attempt to download the 0.95.2 source and signature from the clamav.net web page, I get a "400 Bad Request" error. Bowie ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml

Re: [Clamav-users] Signature dups

2009-06-30 Thread Bill Landry
> On Tue, 30 Jun 2009 09:59:18 -0700 > "Bill Landry" wrote: > >> > On Tue, 30 Jun 2009 10:28:36 -0400 >> > Tom Shaw wrote: >> > >> >> Does freshclam or clam on load/reload look for and remove dup >> >> signatures? >> > >> > No, it doesn't. This is up to the database maintainers to avoid >> > dupl

Re: [Clamav-users] Signature dups

2009-06-30 Thread Tomasz Kojm
On Tue, 30 Jun 2009 09:59:18 -0700 "Bill Landry" wrote: > > On Tue, 30 Jun 2009 10:28:36 -0400 > > Tom Shaw wrote: > > > >> Does freshclam or clam on load/reload look for and remove dup > >> signatures? > > > > No, it doesn't. This is up to the database maintainers to avoid > > duplicates. > >

Re: [Clamav-users] Signature dups

2009-06-30 Thread Bill Landry
> On Tue, 30 Jun 2009 10:28:36 -0400 > Tom Shaw wrote: > >> Does freshclam or clam on load/reload look for and remove dup >> signatures? > > No, it doesn't. This is up to the database maintainers to avoid > duplicates. So if, for example, the following signature: 54686973206973206120746573742073

Re: [Clamav-users] Signature dups

2009-06-30 Thread Tomasz Kojm
On Tue, 30 Jun 2009 10:28:36 -0400 Tom Shaw wrote: > Does freshclam or clam on load/reload look for and remove dup signatures? No, it doesn't. This is up to the database maintainers to avoid duplicates. -- oo. Tomasz Kojm (\/)\. http://www.ClamAV.net/gpg/t

[Clamav-users] Signature dups

2009-06-30 Thread Tom Shaw
Does freshclam or clam on load/reload look for and remove dup signatures? Tom ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml

Re: [Clamav-users] Spontaneous failure to read DB dir

2009-06-30 Thread Kris Deugau
Dennis Peterson wrote: Kris Deugau wrote: clamscan seems to be able to read the database files just fine. Any suggestions on what to poke to get more detail on what's actually broken? Send the result of running clamconf and ps -ef |grep [c]lam Seems this was a SELinux issue after all. *n