[Clamav-devel] Some Questions in ClamAV

[Satish Gampa]

Hi  all,


I have  some questions when Analyzing Clam AV source code

1.what information Bloom filter datastructure contains that used in
pre-filtering step?
2.Does each complete virus signature(in terms of length) is used to build a
trie ? or  prefix of each  virus signature is placed in bloom filter?
3.what is min and max length of virus signatures to validate?
4. how bloom fliter and tire exactly used in Pattern Matching?

Can anybody help me?


Thanks,
Satish Kumar G