CVD format

CVD (ClamAV Virus Database) is a digitally signed tarball file that contains one or more databases. The header is a 512 bytes long string with colon separated fields:

ClamAV-VDB:build time:version:number of signatures:functionality
level required:MD5 checksum:digital signature:builder name:build time (sec)

sigtool --info displays detailed information on CVD files:

    zolw@localhost:/usr/local/share/clamav$ sigtool -i daily.cvd 
    Build time: 11 Sep 2004 21-07 +0200
    Version: 487
    # of signatures: 1189
    Functionality level: 2
    Builder: ccordes
    MD5: a3f4f98694229e461f17d2aa254e9a43
    Digital signature: uwJS6d+y/9g5SXGE0Hh1rXyjZW/PGK/zqVtWWVL3/tfHEn
    A17z6VB2IBR2I/OitKRYzmVo3ibU7bPCJNgi6fPcW1PQwvCunwAswvR0ehrvY/4ks
    UjUOXo1VwQlW7l86HZmiMUSyAjnF/gciOSsOQa9Hli8D5uET1RDzVpoWu/id
    Verification OK.