[clamav-users] Minor bug or working as intended?

Andrew C Aitchison clamav at aitchison.me.uk
Fri Feb 25 16:39:53 UTC 2022


On Fri, 25 Feb 2022, Laurent S. via clamav-users wrote:

> I've had the same issue. In the last two years, I was regularly
> writing YARA sigs in ClamAV and finding that it behaves in strange
> ways... Especially the regex integration.
           ...            ...
> After too many timeouts and strange stuff, I decided to rewrite all
> of the sigs I had written to LDB. It's not easy to read, less fun to
> write... but damn it's much more reliable and fast.

Did you build any tools to help with your rewrite ?
If so they might be a good starting point for a YARA <-> LDB convertor,
which sounds like a useful project.

-- 
Andrew C. Aitchison					Kendal, UK
 			andrew at aitchison.me.uk


More information about the clamav-users mailing list