sigtool(1)

1sigtool(1)                      Clam AntiVirus                      sigtool(1)
2
3
4

NAME

6       sigtool - signature and database management tool
7

SYNOPSIS

9       sigtool [options]
10

DESCRIPTION

12       sigtool  can be used to generate MD5 checksums, convert data into hexa‐
13       decimal format, list virus signatures and build/unpack/test/verify  CVD
14       databases and update scripts.
15

OPTIONS

17       -h, --help
18              Output help information and exit.
19
20       -V, --version
21              Print version number and exit.
22
23       --quiet
24              Be quiet - output only error messages.
25
26       --stdout
27              Write all messages to stdout.
28
29       --hex-dump
30              Read data from stdin and write hex string to stdout.
31
32       --md5 [FILES]
33              Generate MD5 checksum from stdin or MD5 sigs for FILES.
34
35       --sha1 [FILES]
36              Generate SHA1 checksum from stdin or SHA1 sigs for FILES.
37
38       --sha256 [FILES]
39              Generate SHA256 checksum from stdin or SHA256 sigs for FILES.
40
41       --mdb [FILES]
42              Generate .mdb signatures for FILES.
43
44       --html-normalise=FILE
45              Create  normalised  HTML files comment.html, nocomment.html, and
46              script.html in current working directory.
47
48       --utf16-decode=FILE
49              Decode UTF16 encoded data.
50
51       --vba=FILE
52              Extract VBA/Word6 macros from given MS Office document.
53
54       --vba-hex=FILE
55              Extract Word6 macros from given MS Office document  and  display
56              the corresponding hex values.
57
58       -i, --info
59              Print a CVD information and verify MD5 and a digital signature.
60
61       -b, --build
62              Build a CVD file. -s, --server is required.
63
64       --server
65              ClamAV  Signing  Service address (for virus database maintainers
66              only).
67
68       --datadir=DIR
69              Use DIR as the default database directory for all operations.
70
71       --unpack=FILE, -u FILE
72              Unpack FILE (CVD) to a current directory.
73
74       --unpack-current
75              Unpack a local CVD file (main or daily) to current directory.
76
77       --diff=OLD NEW, -d OLD NEW
78              Create a diff file for OLD and NEW CVDs/INCDIRs.
79
80       --run-cdiff=FILE, -r FILE
81              Execute update script FILE in current directory.
82
83       --verify-cdiff=FILE, -r FILE
84              Verify DIFF against CVD/INCDIR.
85
86       -l[FILE], --list-sigs[=FILE]
87              List all signature  names  from  the  local  database  directory
88              (default) or from FILE.
89
90       -fREGEX, --find-sigs=REGEX
91              Find  and  display  signatures from the local database directory
92              which match the given REGEX. The whole signature body (name, hex
93              string, etc.) is checked.
94
95       -fREGEX, --decode-sigs=REGEX
96              Decode  signatures  read from the standard input (eg. piped from
97              --find-sigs)
98
99       -fREGEX, --test-sigs=DATABASE TARGET_FILE
100              Test all signatures  from  DATABASE  against  TARGET_FILE.  This
101              option  will  only  give valid results if the target file is the
102              final one (after unpacking, normalization, etc.) for  which  the
103              signatures were created.
104

EXAMPLES

106       Generate hex string from testfile and save it to testfile.hex:
107
108              cat testfile | sigtool --hex-dump > testfile.hex
109

CREDITS

111       Please check the full documentation for credits.
112

AUTHOR

114       Tomasz Kojm <tkojm@clamav.net>
115