CyberSoft CVDL

CVDL Tutorial

2. VDL Format

The format for specifying a VDL is:

  : name , definition #

• The VDL name can consist of any characters, including spaces, but can not contain a comma, since the comma is used to separate the name from the definition.
• The VDL definition consists of a sequence of patterns and operators. The definition is terminated by the # character.
  • The simplest type of patterns are literal strings, e.g. "abc" or "\x01\x4d\xaa", where "\x.." is used to specify bytes in hex.
  • Prefixing a string with a tilde (~) specifies case-insensitive matching, e.g. ~"abc" will match "abc", "ABC", "AbC", etc.
  • The simplest type of operators are the high-level logic operators: AND, OR, NOT, XOR.

Listen to the Audio

Contents | Previous | Next