On 5/29/07, zck570 <[EMAIL PROTECTED]> wrote: > who can tell me the flags in daily.wdb ? in phishsigs_howto.pdf only explains > the "R" and "H" flags,but i saw the new daily.wdb , > it has "M" and "X" flags,what mean is it ?
R and H are for .pdb, M and X are for .wdb. I didn't update the documentation... X is for regular expressions, M is for direct matching. > and why daily.pdb only have the format: H:cgi.ebay.de ,can write in > dayily.pdb like daily.wdb: > X:.+cgi.*\.ebay\.de.+:.+pics\.ebay\.com.+:14- If you replace X with R. > and what mean about : 14-, mean more than 14 character ? That is a functionality level specification, meaning only for clamav engines with functionality level >=14. --Edwin _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html
