Some Questions in ClamAV

Hi  all,


I have  some questions when Analyzing Clam AV source code

1.what information Bloom filter datastructure contains that used in
pre-filtering step?
2.Does each complete virus signature(in terms of length) is used to build a
trie ? or  prefix of each  virus signature is placed in bloom filter?
3.what is min and max length of virus signatures to validate?
4. how bloom fliter and tire exactly used in Pattern Matching?

Can anybody help me?


Thanks,
Satish Kumar G
_______________________________________________
http://lurker.clamav.net/list/clamav-devel.html
Please submit your patches to our Bugzilla: http://bugs.clamav.net

http://www.clamav.net/contact.html#ml