mirror of
https://github.com/zeek/zeek.git
synced 2025-10-02 14:48:21 +00:00

* origin/topic/seth/more-file-type-ident-fixes: File API updates complete. Fixes for file type identification. API changes to file analysis mime type detection. Make HTTP 206 reassembly require ETags by default. More file type identification improvements Fix an issue with files having gaps before the bof_buffer is filled. Fix an issue with packet loss in http file reporting. Adding WOFF fonts to file type identification. Extended JSON matching and added OCSP responses. Another large signature update. More signature updates. Even more file type ident clean up. Lots of fixes for file type identification. BIT-1368 #merged
41 lines
943 B
Standard ML
41 lines
943 B
Standard ML
|
|
# Web Open Font Format
|
|
signature file-woff {
|
|
file-magic /^wOFF/
|
|
file-mime "application/font-woff", 70
|
|
}
|
|
|
|
# TrueType font
|
|
signature file-ttf {
|
|
file-mime "application/x-font-ttf", 80
|
|
file-magic /^\x00\x01\x00\x00\x00/
|
|
}
|
|
|
|
signature file-embedded-opentype {
|
|
file-mime "application/vnd.ms-fontobject", 50
|
|
file-magic /^.{34}LP/
|
|
}
|
|
|
|
# X11 SNF font
|
|
signature file-snf {
|
|
file-mime "application/x-font-sfn", 70
|
|
file-magic /^(\x04\x00\x00\x00|\x00\x00\x00\x04).{100}(\x04\x00\x00\x00|\x00\x00\x00\x04)/
|
|
}
|
|
|
|
# OpenType font
|
|
signature file-opentype {
|
|
file-mime "application/vnd.ms-opentype", 70
|
|
file-magic /^OTTO/
|
|
}
|
|
|
|
# FrameMaker Font file
|
|
signature file-maker-screen-font {
|
|
file-mime "application/x-mif", 190
|
|
file-magic /^\x3cMakerScreenFont/
|
|
}
|
|
|
|
# >0 string,=SplineFontDB: (len=13), ["Spline Font Database "], swap_endian=0
|
|
signature file-spline-font-db {
|
|
file-mime "application/vnd.font-fontforge-sfd", 160
|
|
file-magic /^SplineFontDB\x3a/
|
|
}
|