mirror of
https://github.com/zeek/zeek.git
synced 2025-10-02 22:58:20 +00:00
80656d5294
- This moves the signatures out of the libmagic imported signatures and into our own general.sig. - Expand the detection to LZMA compressed flash files.
16 lines
No EOL
373 B
Standard ML
16 lines
No EOL
373 B
Standard ML
# General purpose file magic signatures.
|
|
|
|
signature file-plaintext {
|
|
file-magic /([[:print:][:space:]]{10})/
|
|
file-mime "text/plain", -20
|
|
}
|
|
|
|
signature file-tar {
|
|
file-magic /([[:print:]\x00]){100}(([[:digit:]\x00\x20]){8}){3}/
|
|
file-mime "application/x-tar", 150
|
|
}
|
|
|
|
signature file-swf {
|
|
file-magic /(F|C|Z)WS/
|
|
file-mime "application/x-shockwave-flash", 60
|
|
} |