On 04/16/11 06:14, Nathan Gibbs wrote:
> Is there some test data that will cause clamd to to emit the .UNOFFICIAL
> output without loading any 3rd party DB's
Just load any db file in non cvd/cld format.
-aCaB
___
Help us build a comprehensive ClamAV gu
On 04/16/11 03:56, Nathan Gibbs wrote:
> I don't think passing conf options all the way down into the library is going
> to work out too well. I'll try ambushing the virus name on its way back up.
>
>> As it is I edit the source code at each build and turn it off.
>>
>
> As it is I edit the sour
* aCaB wrote:
>
> FYI you can use callbacks, in particular clcb_post_scan.
> See clamav.h for details.
>
> -aCaB
>
>
Alas, my c-fu is not adequate.
:-(
What did you just say!
LOL :-)
I'm guessing that clcb_post_scan can be used to ambush the virus name soon
after it escapes from libclamav.
I
* aCaB wrote:
> On 04/16/11 06:14, Nathan Gibbs wrote:
>> Is there some test data that will cause clamd to to emit the .UNOFFICIAL
>> output without loading any 3rd party DB's
>
> Just load any db file in non cvd/cld format.
>
> -aCaB
>
>
Do you mean something like.
cat daily.cvd | sigtool -m
On 2011-04-16 17:06, Nathan Gibbs wrote:
> * aCaB wrote:
>>
>> FYI you can use callbacks, in particular clcb_post_scan.
>> See clamav.h for details.
>>
>> -aCaB
>>
>>
>
> Alas, my c-fu is not adequate.
> :-(
>
> What did you just say!
> LOL :-)
>
> I'm guessing that clcb_post_scan can be used to
* Török Edwin wrote:
> On 2011-04-16 17:06, Nathan Gibbs wrote:
>>
>> I'm guessing that clcb_post_scan can be used to ambush the virus name
>> soon after it escapes from libclamav.
>
> It allows you to get a callback
Whatever that is.
:-)
> for every file we scan (including archive members), a
On 04/16/11 16:48, Nathan Gibbs wrote:
> Do you mean something like.
>
> cat daily.cvd | sigtool -mdb > daily.mdb
That won't work. If you want to use an official db you should you
"sigtool --unpack".
Alternatively you can forge your own custom db. E.g.:
acab@1337ness:/tmp$ echo "this is an examp
