Re: [clamav-users] Filename Regex

2016-02-19 Thread Mehmet Avcioglu
> On Feb 19, 2016, at 1:30 AM, Noel Jones wrote: > You may have more luck with the POSIX character class [[:space:]] > rather than shorthand \s. Character classes generate "ERROR: Malformed database" errors. > On Feb 19, 2016, at 1:29 AM, Steven Morgan

Re: [clamav-users] Filename Regex

2016-02-18 Thread Noel Jones
You may have more luck with the POSIX character class [[:space:]] rather than shorthand \s. -- Noel Jones On 2/18/2016 5:22 PM, Dennis Peterson wrote: > ^New\ Doc.* (<- that is from the below example but is actually a > poorly constructed regex because it will search to end of > line/string)

Re: [clamav-users] Filename Regex

2016-02-18 Thread Steven Morgan
Whoops, I take that back. The code used in ClamAV appears more similar to the "BSD library." Comments state: * This code is derived from OpenBSD's libc/regex, original license follows: * * Copyright (c) 1992, 1993, 1994 Henry Spencer. * Copyright (c) 1992, 1993, 1994 *The Regents of the

Re: [clamav-users] Filename Regex

2016-02-18 Thread Dennis Peterson
^New\ Doc.* (<- that is from the below example but is actually a poorly constructed regex because it will search to end of line/string) should work to escape the space char but that is one of the oddities of regex - knowing which implementation is being used. dp On 2/18/16 3:13 PM, Steven

Re: [clamav-users] Filename Regex

2016-02-18 Thread Steven Morgan
Please see https://garyhouston.github.io/regex/. Looks like ClamAV uses what is called the "old library." I don't think this is POSIX compliant with regard to regular expressions. Hope this helps, Steve On Thu, Feb 18, 2016 at 3:12 PM, Mehmet Avcioglu wrote: > > > On Feb

Re: [clamav-users] Filename Regex

2016-02-18 Thread Steve basford
On 18 February 2016 20:14:14 Mehmet Avcioglu wrote: For example I am able to use "^New.Doc.*" to match for "New Doc.xls" but "^New\sDoc.*" or "^New Doc.*" does not. > http://www.clamav.net/contact.html#ml If you look at foxhole databases it should give you an

Re: [clamav-users] Filename Regex

2016-02-18 Thread Mehmet Avcioglu
> On Feb 18, 2016, at 8:14 PM, Steven Morgan wrote: > > cdb signatures use a regex library known as "Henry Spencer's regular > expressions." Googling documentation for that should give what you want. Thank you for the information. I searched out for that and found

Re: [clamav-users] Filename Regex

2016-02-18 Thread Steven Morgan
cdb signatures use a regex library known as "Henry Spencer's regular expressions." Googling documentation for that should give what you want. Steve On Thu, Feb 18, 2016 at 6:39 AM, Mehmet Avcioglu wrote: > > What is the format for Filename Regex pattern used in cdb

[clamav-users] Filename Regex

2016-02-18 Thread Mehmet Avcioglu
What is the format for Filename Regex pattern used in cdb signature files? I have not been able to find a documentation for this and some of the valid regex strings I use are not recognized. For example I cannot find a way to match for '@' character, or use '\s' for white space. Thanks --