[clamav-users] Clamav signature

[Arjen de Korte]

Citeren Jeff Koch <jeffkoch at intersessions.com>:

> HI
>
> Looking through our scanning logs we see what appears to be a  
> signature that looks like this
>
> clamav: 0.102.4/m:59/d:25920
>
> '0.102.4' refers to the clamav version but what does the rest mean -  
> m:59/d:25920 ?

If you look at the freshclam logs, the pattern is fairly obvious:

sep 17 18:45:42 mail freshclam[65271]: daily.cld database is up to  
date (version: 25931, sigs: 4319278, f-level: 63, builder: raynman)
sep 17 18:45:42 mail freshclam[65271]: main.cld database is up to date  
(version: 59, sigs: 4564902, f-level: 60, builder: sigmgr)
sep 17 18:45:42 mail freshclam[65271]: bytecode.cld database is up to  
date (version: 331, sigs: 94, f-level: 63, builder: anvilleg)