> On Feb 19, 2016, at 1:30 AM, Noel Jones wrote:
> You may have more luck with the POSIX character class [[:space:]]
> rather than shorthand \s.
Character classes generate "ERROR: Malformed database" errors.
> On Feb 19, 2016, at 1:29 AM, Steven Morgan
You may have more luck with the POSIX character class [[:space:]]
rather than shorthand \s.
-- Noel Jones
On 2/18/2016 5:22 PM, Dennis Peterson wrote:
> ^New\ Doc.* (<- that is from the below example but is actually a
> poorly constructed regex because it will search to end of
> line/string)
Whoops, I take that back. The code used in ClamAV appears more similar to
the "BSD library." Comments state:
* This code is derived from OpenBSD's libc/regex, original license follows:
*
* Copyright (c) 1992, 1993, 1994 Henry Spencer.
* Copyright (c) 1992, 1993, 1994
*The Regents of the
^New\ Doc.* (<- that is from the below example but is actually a poorly
constructed regex because it will search to end of line/string) should work to
escape the space char but that is one of the oddities of regex - knowing which
implementation is being used.
dp
On 2/18/16 3:13 PM, Steven
Please see https://garyhouston.github.io/regex/.
Looks like ClamAV uses what is called the "old library." I don't think this
is POSIX compliant with regard to regular expressions.
Hope this helps,
Steve
On Thu, Feb 18, 2016 at 3:12 PM, Mehmet Avcioglu
wrote:
>
> > On Feb
On 18 February 2016 20:14:14 Mehmet Avcioglu wrote:
For example I am able to use "^New.Doc.*" to match for "New Doc.xls" but
"^New\sDoc.*" or "^New Doc.*" does not.
> http://www.clamav.net/contact.html#ml
If you look at foxhole databases it should give you an
> On Feb 18, 2016, at 8:14 PM, Steven Morgan wrote:
>
> cdb signatures use a regex library known as "Henry Spencer's regular
> expressions." Googling documentation for that should give what you want.
Thank you for the information. I searched out for that and found
cdb signatures use a regex library known as "Henry Spencer's regular
expressions." Googling documentation for that should give what you want.
Steve
On Thu, Feb 18, 2016 at 6:39 AM, Mehmet Avcioglu
wrote:
>
> What is the format for Filename Regex pattern used in cdb
What is the format for Filename Regex pattern used in cdb signature files?
I have not been able to find a documentation for this and some of the valid
regex strings I use are not recognized. For example I cannot find a way to
match for '@' character, or use '\s' for white space.
Thanks
--