Hi Kilburn, There are a couple of yara items still TBD. "uint32be" arrived in a more current yara release than that used for ClamAV 0.99, "pe" is a keyword requiring yara module support. Yara modules are not yet supported by ClamAV. Yara modules and yara version upgrade are on the ClamAV road map. the See docs/signatures.pdf for the current limitations on usinf yara rules within ClamAV.
Steve On Sat, Dec 12, 2015 at 5:22 PM, Kilburn Abrahams <[email protected]> wrote: > Hi List > > After upgrading to clamav 0.99 and using yara rules, I am getting these > eror messages. I have pcre 8.38 and using python 3.4 as default. I tried > googling to no availl. > > Any idea of what package is missing? > > LibClamAV Error: yyerror(): /var/lib/clamav/malicious_document.yar line 245 > undefined identifier "uint32be" > LibClamAV Error: yyerror(): /var/lib/clamav/packer.yar line 95 undefined > identifier "pe" > > Thanks > Kilburn > _______________________________________________ > Help us build a comprehensive ClamAV guide: > https://github.com/vrtadmin/clamav-faq > > http://www.clamav.net/contact.html#ml > _______________________________________________ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml
