mirror of
https://github.com/zeek/zeek.git
synced 2025-10-02 06:38:20 +00:00
037d582b0e
- It's derived from the magic database of libmagic 5.14, but with most everything not related to mime types removed. - The custom database is always used by default for mime detection, but the more verbose file type detection will fall back on the default libmagic installation's database. The result is: mime type strings are now guaranteed to be consistent across platforms, but the verbose file type descriptions are not. - The custom database gets installed in $prefix/share/bro/magic, and should even be extensible if files with new patterns are added inside the directory. - The search path for the mime magic database can be controlled via BROMAGIC environment variable. - Remove mime_desc field from ftp.log. - Stop using the mime/file type canonifier with unit tests. - libmagic >= 5.04 is now a requirement.
77 lines
2.6 KiB
Text
77 lines
2.6 KiB
Text
# See COPYING file in this directory for original libmagic copyright.
|
|
#------------------------------------------------------------------------------
|
|
# $File: compress,v 1.48 2011/12/07 18:39:43 christos Exp $
|
|
# compress: file(1) magic for pure-compression formats (no archives)
|
|
#
|
|
# compress, gzip, pack, compact, huf, squeeze, crunch, freeze, yabba, etc.
|
|
#
|
|
# Formats for various forms of compressed data
|
|
# Formats for "compress" proper have been moved into "compress.c",
|
|
# because it tries to uncompress it to figure out what's inside.
|
|
|
|
# standard unix compress
|
|
0 string \037\235 compress'd data
|
|
!:mime application/x-compress
|
|
!:apple LZIVZIVU
|
|
|
|
# gzip (GNU zip, not to be confused with Info-ZIP or PKWARE zip archiver)
|
|
# Edited by Chris Chittleborough <cchittleborough@yahoo.com.au>, March 2002
|
|
# * Original filename is only at offset 10 if "extra field" absent
|
|
# * Produce shorter output - notably, only report compression methods
|
|
# other than 8 ("deflate", the only method defined in RFC 1952).
|
|
0 string \037\213 gzip compressed data
|
|
!:mime application/x-gzip
|
|
|
|
# packed data, Huffman (minimum redundancy) codes on a byte-by-byte basis
|
|
0 string \037\036 packed data
|
|
!:mime application/octet-stream
|
|
|
|
#
|
|
# This magic number is byte-order-independent.
|
|
0 short 0x1f1f old packed data
|
|
!:mime application/octet-stream
|
|
|
|
# XXX - why *two* entries for "compacted data", one of which is
|
|
# byte-order independent, and one of which is byte-order dependent?
|
|
#
|
|
0 short 0x1fff compacted data
|
|
!:mime application/octet-stream
|
|
# This string is valid for SunOS (BE) and a matching "short" is listed
|
|
# in the Ultrix (LE) magic file.
|
|
0 string \377\037 compacted data
|
|
!:mime application/octet-stream
|
|
0 short 0145405 huf output
|
|
!:mime application/octet-stream
|
|
|
|
# bzip2
|
|
0 string BZh bzip2 compressed data
|
|
!:mime application/x-bzip2
|
|
|
|
# lzip
|
|
0 string LZIP lzip compressed data
|
|
!:mime application/x-lzip
|
|
|
|
# 7-zip archiver, from Thomas Klausner (wiz@danbala.tuwien.ac.at)
|
|
# http://www.7-zip.org or DOC/7zFormat.txt
|
|
#
|
|
0 string 7z\274\257\047\034 7-zip archive data,
|
|
>6 byte x version %d
|
|
>7 byte x \b.%d
|
|
!:mime application/x-7z-compressed
|
|
|
|
# Type: LZMA
|
|
0 lelong&0xffffff =0x5d
|
|
>12 leshort =0xff LZMA compressed data,
|
|
>>5 lequad =0xffffffffffffffff streamed
|
|
>>5 lequad !0xffffffffffffffff non-streamed, size %lld
|
|
!:mime application/x-lzma
|
|
|
|
# http://tukaani.org/xz/xz-file-format.txt
|
|
0 ustring \xFD7zXZ\x00 XZ compressed data
|
|
!:mime application/x-xz
|
|
|
|
# https://github.com/ckolivas/lrzip/blob/master/doc/magic.header.txt
|
|
0 string LRZI LRZIP compressed data
|
|
>4 byte x - version %d
|
|
>5 byte x \b.%d
|
|
!:mime application/x-lrzip
|