On Tue, Apr 21, 2009 at 21:25, James Wilkinson <sa-u...@aprilcottage.co.uk> wrote: > Karsten Bräckelmann wrote: >> By looking at the sub-rules' names I got the impression they are just >> random. But maybe they actually are somehow based on the rule's content? >> Never checked. Justin? > > Justin Mason replied: >> yep, they're derived from a hash of the string. > > Is that documented, or could it be documented somewhere?
ok, I'll try to do that ;) > I haven’t had to touch it recently, but I do have a small .cf of false > positives: > meta __SEEK_LZH2GT 0 # Microsoft Office 2003 Pro > meta __SEEK_O1TQTY 0 # aving trouble viewing this e > meta __SEEK_QGCXIK 0 # lots of dots > which relies on the names being derived from the string. thanks -- I'll remove those upstream.