[Clamav-devel] [Regular Expression] HEXSIG[x-y]aa
kimdien
kimdien at ampm.com.vn
Thu Dec 4 21:35:50 EST 2014
Hi,
My thesis is related with regex signatures in ClamAV database.
I don't understand type HexSIG[x-y]aa or aa[x-y]HexSIG.
In https://bugzilla.clamav.net/show_bug.cgi?id=776#add_comment, you use
testsig:7:5:64[4-4]61616161{2}6262[3-6]65:27
And test data(HexSIG):64616161616161616164646262626262636365 is match with
testsig
My question is:
is HexSIG: "64676767676161616164646262626262636365" match?
is HexSIG: "64616161616161616169696262626262636365" match?
Please help me
Best Regards
More information about the clamav-devel
mailing list