[clamav-users] undefined identifier modules

[Steven Morgan]

Hi Kilburn,

There are a couple of yara items still TBD. "uint32be" arrived in a more
current yara release than that used for ClamAV 0.99, "pe" is a keyword
requiring yara module support. Yara modules are not yet supported by
ClamAV. Yara modules and yara version upgrade are on the ClamAV road map.
the See docs/signatures.pdf for the current limitations on usinf yara rules
within ClamAV.

Steve

On Sat, Dec 12, 2015 at 5:22 PM, Kilburn Abrahams <kilburna at gmail.com>
wrote:

> Hi List
>
> After upgrading to clamav 0.99 and using yara rules, I am getting these
> eror messages. I have pcre 8.38 and using python 3.4 as default. I tried
> googling to no availl.
>
> Any idea of what package is missing?
>
> LibClamAV Error: yyerror(): /var/lib/clamav/malicious_document.yar line 245
> undefined identifier "uint32be"
> LibClamAV Error: yyerror(): /var/lib/clamav/packer.yar line 95 undefined
> identifier "pe"
>
> Thanks
> Kilburn
> _______________________________________________
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
>
> http://www.clamav.net/contact.html#ml
>