home
***
CD-ROM
|
disk
|
FTP
|
other
***
search
/
Collection of Tools & Utilities
/
Collection of Tools and Utilities.iso
/
dskut
/
filed39a.zip
/
magic
< prev
next >
Wrap
Text File
|
1993-08-04
|
59KB
|
1,727 lines
# Magic file created Wed Aug 4 20:28:33 GMT 1993 by root
#! file
# Magic data for file(1) command.
# Machine-genererated from src/cmd/file/magdir/*; edit there only!
# Format is described in magic(files), where:
# files is 4 on V7 and BSD, 4 on SV, and ?? in the SVID.
# $Id: Localstuff,v 1.2 93/01/05 13:22:25 ian Exp $
# Add any locally-observed files here. Remember:
# text if readable, executable if runnable binary, data if unreadable.
#
# Alliant FX series a.out files:
# If the FX series is the one that had a processor with a 68K-derived
# instruction set, the "short" should probably become "beshort" and the
# "long" should probably become "belong".
# If it's the i860-based one, they should probably become either the
# big-endian or little-endian versions, depending on the mode they ran
# the 860 in....
#
0 short 0420 0420 Alliant virtual executable
>2 short &0x0020 common library
>16 long >0 not stripped
0 short 0421 0421 Alliant compact executable
>2 short &0x0020 common library
>16 long >0 not stripped
#
# magic.apl:
#
0 long 0100554 APL workspace (Ken's original?)
#
# "ar", for all kinds of archives.
#
# XXX - why are there multiple <ar> thingies? Note that 0x213c6172 is
# "!<ar", so, for new-style (4.xBSD/SVR2andup) archives, we have:
#
# 0 string !<arch> current ar archive
# 0 long 0x213c6172 archive file
#
# and for SVR3.1 archives, we have:
#
# 0 string \<ar> System V Release 1 ar archive
# 0 string =<ar> archive
# 0 string =<ar> archive
#
# XXX - did Aegis really store shared libraries, breakpointed modules,
# and absolute code program modules in the same format as new-style
# "ar" archives?
#
0 string !<arch> current ar archive
>8 string __.SYMDEF random library
>0 belong =65538 - pre SR9.5
>0 belong =65539 - post SR9.5
>0 beshort 2 - object archive
>0 beshort 3 - shared library module
>0 beshort 4 - debug break-pointed module
>0 beshort 5 - absolute code program module
0 string \<ar> System V Release 1 ar archive
0 string =<ar> archive
#
# XXX - from "vax", which appears to collect a bunch of byte-swapped
# thingies, to help you recognize VAX files on big-endian machines;
# with "leshort", "lelong", and "string", that's no longer necessary....
#
# 0 long 0x3c61723e VAX 5.0 archive
#
0 long 0x213c6172 archive file
0 lelong 0177555 very old VAX archive
0 leshort 0177555 very old PDP-11 archive
#
# XXX - "pdp" claims that 0177545 can have an __.SYMDEF member and thus
# be a random library (it said 0xff65 rather than 0177545).
#
0 lelong 0177545 old VAX archive
>8 string __.SYMDEF random library
0 leshort 0177545 old PDP-11 archive
>8 string __.SYMDEF random library
#
0 string =<ar> archive
#
# From "pdp":
#
0 lelong 0x39bed PDP-11 old archive
0 lelong 0x39bee PDP-11 4.0 archive
#
0 string -h- Software Tools format archive text
# "arc" archiver
#0 byte 26 'arc' archive
#>1 byte 0 (empty)
#>1 byte 1 (old format)
#
# >>>>> ARJ archiver <<<<< (source: arj 2.39a beta)
# ARJ archives contains two types of header blocks:
#
# Archive main header - This is located at the head of the archive
# Local file header - This is located before each archived file
#
# Structure of main header (low order byte first):
#
# Bytes Description
# ----- -------------------------------------------------------------------
# 2 header id (main and local file) = 0xEA60 or 60000U
# 2 basic header size (from 'first_hdr_size' thru 'comment' below)
# = first_hdr_size + strlen(filename) + 1 + strlen(comment) + 1
# = 0 if end of archive
#
# 1 first_hdr_size (size up to and including 'extra data')
# 1 archiver version number [2.30==v4 ? 2.39==v5 ?]
# 1 minimum archiver version to extract
# 1 host OS (0 = MSDOS, 1 = PRIMOS, 2 = UNIX, 3 = AMIGA, 4 = MAC-OS)
# (5 = OS/2, 6 = APPLE GS, 7 = ATARI ST, 8 = NEXT)
# (9 = VAX VMS)
# [text deleted]
0 short 0xea60 arj archive
#
# >>>>> ARC <<<<< (source: Greg Roelofs roe2@midway.uchicago.edu)
#
0 string \032\010 Arc archive
# 0 short 0x1a08 Arc archive
# 0 short 0x081a Arc archive
#
# >>>>> LHARC/LHA <<<<< (source: Greg Roelofs roe2@midway.uchicago.edu)
#
2 string -lh0- Lharc 1.x archive
2 string -lh1- Lharc 1.x archive
2 string -lz4- Lharc 1.x archive
2 string -lz5- Lharc 1.x archive
# [never seen any but the last:]
2 string -lzs- LHa 2.x? archive [lzs]
2 string -lh\ - LHa 2.x? archive [lh ]
2 string -lhd- LHa 2.x? archive [lhd]
2 string -lh2- Lha 2.x? archive [lh2]
2 string -lh3- LHa 2.x? archive [lh3]
2 string -lh4- LHa 2.x? archive [lh4]
2 string -lh5- LHa (2.x) archive
#
# >>>>> ZIP <<<<< (source: Greg Roelofs roe2@midway.uchicago.edu)
# [extract ver is from 1st file only]
#
0 string PK\003\004 Zip archive
>4 string \011 (at least v0.9 to extract)
>4 string \012 (at least v1.0 to extract)
>4 string \013 (at least v1.1 to extract)
>4 string \024 (at least v2.0 to extract)
#
# >>>>> ZOO <<<<< (source: Greg Roelofs roe2@midway.uchicago.edu)
#
# [GRR: don't know if all of these versions exist, or if some missing...]
#0 string ZOO Zoo archive
# [DH: Use GRR's alternate identifiers]
0x2a string \xdc\xa7\xc4\xfd
>0 string >0 %.16s
# >4 string 1.00 (v%4s)
# >4 string 1.10 (v%4s)
# >4 string 1.20 (v%4s)
# >4 string 1.30 (v%4s)
# >4 string 1.40 (v%4s)
# >4 string 1.50 (v%4s)
# >4 string 1.60 (v%4s)
# >4 string 1.70 (v%4s)
# >4 string 1.71 (v%4s)
# >4 string 2.00 (v%4s)
# >4 string 2.01 (v%4s)
# >4 string 2.10 (v%4s)
>32 string \001\000 (modify: v1.0+)
>32 string \001\004 (modify: v1.4+)
>32 string \002\000 (modify: v2.0+)
>70 string \001\000 (extract: v1.0+)
>70 string \002\001 (extract: v2.1+)
0 string ZOO Zoo archive
# [GRR: the following are alternate identifiers]
#0x2a long 0xdca7c4fd Zoo archive
#0x2a long 0xc4fddca7 Zoo archive
#
# >>>>> HPACK <<<<< (source: Peter Gutmann pgut1@cs.aukuni.ac.nz)
# Here's the entry from the local magic file - it's for Ultrix, the format
# may not be 100% the same as everyone else's. Basically the ID bytes are a
# 4-byte string 'HPAK' at the start. Anything after that is indeterminate,
# since for example if the archive is encrypted the entire thing will be one
# big block of white noise - it's only the 4-byte ID you can rely on 100%.
# Once the ISO approves ISO 8824 and 8825 I'll use that format, which will
# provide a lot more information, but that will probably still take awhile....
# 4 string HPAK 1,1 HPACK archive
0 string HPAK HPACK archive
#
# AT&T 3B machines
#
# The `versions' should be un-commented if they work for you.
# (Was the problem just one of endianness?)
#
# 3B20
#
0 beshort 0550 3b20 COFF executable
>12 belong >0 not stripped
#>22 beshort >0 - version %ld
0 beshort 0551 3b20 COFF executable (TV)
>12 belong >0 not stripped
#>22 beshort >0 - version %ld
#
# WE32K
#
0 beshort 0560 WE32000 COFF
>18 beshort ^00000020 object
>18 beshort &00000020 executable
>12 belong >0 not stripped
>18 beshort ^00010000 N/A on 3b2/300 w/paging
>18 beshort &00020000 32100 required
>18 beshort &00040000 and mau hardware required
>20 beshort 0407 (impure)
>20 beshort 0410 (pure)
>20 beshort 0413 (demand paged)
>20 beshort 0443 (target shared library)
>22 beshort >0 - version %ld
0 beshort 0561 WE32000 COFF executable (TV)
>12 belong >0 not stripped
#>18 beshort &00020000 - 32100 required
#>18 beshort &00040000 and mau hardware required
#>22 beshort >0 - version %ld
# Sound formats, from Jan Nicolai Langfeldt <janl@ifi.uio.no>
#
# XXX -what the hell is the "mips" stuff doing there? It looks like
# the archive stuff from "iris"....
#
0 string .snd audio data:
>12 long 1 8-bit u-law,
>12 long 2 8-bit linear PCM,
>12 long