class TeamCymru::Malware

Public Class Methods

new(server='hash.cymru.com', port=43) click to toggle source
# File lib/teamcymru/malware.rb, line 14
def initialize(server='hash.cymru.com', port=43)
        @server = server
        @port = port
end

Public Instance Methods

lookup(hashes) click to toggle source
# File lib/teamcymru/malware.rb, line 19
def lookup(hashes)
        if hashes.class == Array
                hashes = hashes.join("\n")
        end
        res = []
        t = TCPSocket.new(@server,@port)
        t.write("begin\nverbose\n#{hashes}\nend\n")
        t.each_line do |l|
                next if l =~ /^#/
                res << MalwareResult.new(*(l.chomp.split(/\s+/,3)))
        end
        res
end