[clamav-users] file name extension cvd cld clamtmp cud hdb etc., mime types

[Jörg Jenderek]

Hello,
i found several file name extension for Clamav virus databases,
but i found no official or good explanation for used extension.

According to man page for freshclam.conf i expected that "cld" extension
is used for uncompressed database and "cvd" is used for compressed
database nowadays after update process with 2 different
CompressLocalDatabase values. But this not always true for my expected
examples.
Furthermore it is not written in official documentation what
is the meaning of uncompressed or compressed database.
For my examples uncompressed database contains tar file and compressed
database contains gzipped tar file. I verified this by file(1) command
and by cutting of 512 byte header part with dd command and inspecting
remaining parts with gz and tar command. But i do not know if this
always or true or if other compression methods like bz2, xz can be occur.

During update process when downloading database filenames like
clamav-*.clamtmp seems to be used.

According to manual clamdoc.pdf ClamAV Virus Database header is a
512-bytes long string with colon separated fields:
ClamAV-VDB:build time:version:number of signatures:functionality
level required:MD5 checksum:digital signature:builder name:build time

This is true for cvd and cld files, but not for database with "cud"
extension. Does exist an official header description for such cud files?

Sorry i am not a c programmer. But when looking in source file cvd.c
there seem to exist many more file name extension like "hdb" for
example. So what are the meaning of such extensions used by clamav?

As far as i know clamav is the only open source antivirus solution.
So it would be nice to have mime types ( best official registered ) for
clamav databases. But i found no mime type. So does somebody knows about
mime type for clamav database?

Thanks for hints and explanations
Jörg Jenderek
-- 
Jörg Jenderek