[Clamav-devel] Some Questions in ClamAV

Satish Gampa satish.g at tringapps.com
Mon Jun 20 05:09:22 EDT 2016


Hi  all,


I have  some questions when Analyzing Clam AV source code

1.what information Bloom filter datastructure contains that used in
pre-filtering step?
2.Does each complete virus signature(in terms of length) is used to build a
trie ? or  prefix of each  virus signature is placed in bloom filter?
3.what is min and max length of virus signatures to validate?
4. how bloom fliter and tire exactly used in Pattern Matching?

Can anybody help me?


Thanks,
Satish Kumar G


More information about the clamav-devel mailing list