polyfile-weave 0.5.5__py3-none-any.whl

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Potentially problematic release.

This version of polyfile-weave might be problematic. Click here for more details.

Files changed (585) hide show
  1. polyfile/__init__.py +15 -0
  2. polyfile/__main__.py +394 -0
  3. polyfile/arithmetic.py +27 -0
  4. polyfile/ast.py +114 -0
  5. polyfile/debugger.py +1039 -0
  6. polyfile/expressions.py +346 -0
  7. polyfile/fileutils.py +343 -0
  8. polyfile/html.py +135 -0
  9. polyfile/http/__init__.py +1 -0
  10. polyfile/http/defacto.py +37 -0
  11. polyfile/http/deprecated.py +51 -0
  12. polyfile/http/experimental.py +67 -0
  13. polyfile/http/http_11.py +548 -0
  14. polyfile/http/matcher.py +37 -0
  15. polyfile/http/structured_headers.py +48 -0
  16. polyfile/iterators.py +72 -0
  17. polyfile/jpeg.py +24 -0
  18. polyfile/kaitai/__init__.py +0 -0
  19. polyfile/kaitai/compiler.py +156 -0
  20. polyfile/kaitai/parser.py +312 -0
  21. polyfile/kaitai/parsers/__init__.py +0 -0
  22. polyfile/kaitai/parsers/aix_utmp.py +116 -0
  23. polyfile/kaitai/parsers/allegro_dat.py +367 -0
  24. polyfile/kaitai/parsers/andes_firmware.py +64 -0
  25. polyfile/kaitai/parsers/android_bootldr_asus.py +105 -0
  26. polyfile/kaitai/parsers/android_bootldr_huawei.py +181 -0
  27. polyfile/kaitai/parsers/android_bootldr_qcom.py +217 -0
  28. polyfile/kaitai/parsers/android_dto.py +138 -0
  29. polyfile/kaitai/parsers/android_img.py +319 -0
  30. polyfile/kaitai/parsers/android_nanoapp_header.py +83 -0
  31. polyfile/kaitai/parsers/android_opengl_shaders_cache.py +151 -0
  32. polyfile/kaitai/parsers/android_sparse.py +237 -0
  33. polyfile/kaitai/parsers/android_super.py +401 -0
  34. polyfile/kaitai/parsers/apm_partition_table.py +196 -0
  35. polyfile/kaitai/parsers/apple_single_double.py +180 -0
  36. polyfile/kaitai/parsers/asn1_der.py +235 -0
  37. polyfile/kaitai/parsers/au.py +138 -0
  38. polyfile/kaitai/parsers/avantes_roh60.py +112 -0
  39. polyfile/kaitai/parsers/avi.py +296 -0
  40. polyfile/kaitai/parsers/bcd.py +111 -0
  41. polyfile/kaitai/parsers/bitcoin_transaction.py +210 -0
  42. polyfile/kaitai/parsers/blender_blend.py +334 -0
  43. polyfile/kaitai/parsers/bmp.py +780 -0
  44. polyfile/kaitai/parsers/bson.py +411 -0
  45. polyfile/kaitai/parsers/btrfs_stream.py +318 -0
  46. polyfile/kaitai/parsers/bytes_with_io.py +27 -0
  47. polyfile/kaitai/parsers/chrome_pak.py +194 -0
  48. polyfile/kaitai/parsers/code_6502.py +456 -0
  49. polyfile/kaitai/parsers/compressed_resource.py +217 -0
  50. polyfile/kaitai/parsers/cpio_old_le.py +154 -0
  51. polyfile/kaitai/parsers/cramfs.py +344 -0
  52. polyfile/kaitai/parsers/creative_voice_file.py +342 -0
  53. polyfile/kaitai/parsers/dbf.py +274 -0
  54. polyfile/kaitai/parsers/dcmp_0.py +664 -0
  55. polyfile/kaitai/parsers/dcmp_1.py +422 -0
  56. polyfile/kaitai/parsers/dcmp_2.py +312 -0
  57. polyfile/kaitai/parsers/dcmp_variable_length_integer.py +66 -0
  58. polyfile/kaitai/parsers/dex.py +1086 -0
  59. polyfile/kaitai/parsers/dicom.py +4370 -0
  60. polyfile/kaitai/parsers/dime_message.py +201 -0
  61. polyfile/kaitai/parsers/dns_packet.py +569 -0
  62. polyfile/kaitai/parsers/doom_wad.py +654 -0
  63. polyfile/kaitai/parsers/dos_datetime.py +191 -0
  64. polyfile/kaitai/parsers/dos_mz.py +172 -0
  65. polyfile/kaitai/parsers/ds_store.py +513 -0
  66. polyfile/kaitai/parsers/dtb.py +310 -0
  67. polyfile/kaitai/parsers/dune_2_pak.py +126 -0
  68. polyfile/kaitai/parsers/edid.py +472 -0
  69. polyfile/kaitai/parsers/efivar_signature_list.py +331 -0
  70. polyfile/kaitai/parsers/elf.py +2482 -0
  71. polyfile/kaitai/parsers/ethernet_frame.py +114 -0
  72. polyfile/kaitai/parsers/exif.py +723 -0
  73. polyfile/kaitai/parsers/ext2.py +537 -0
  74. polyfile/kaitai/parsers/fallout2_dat.py +187 -0
  75. polyfile/kaitai/parsers/fallout_dat.py +156 -0
  76. polyfile/kaitai/parsers/fasttracker_xm_module.py +558 -0
  77. polyfile/kaitai/parsers/ftl_dat.py +90 -0
  78. polyfile/kaitai/parsers/genmidi_op2.py +161 -0
  79. polyfile/kaitai/parsers/gettext_mo.py +541 -0
  80. polyfile/kaitai/parsers/gif.py +492 -0
  81. polyfile/kaitai/parsers/gimp_brush.py +244 -0
  82. polyfile/kaitai/parsers/glibc_utmp.py +114 -0
  83. polyfile/kaitai/parsers/gltf_binary.py +132 -0
  84. polyfile/kaitai/parsers/google_protobuf.py +151 -0
  85. polyfile/kaitai/parsers/gpt_partition_table.py +175 -0
  86. polyfile/kaitai/parsers/gran_turismo_vol.py +140 -0
  87. polyfile/kaitai/parsers/grub2_font.py +337 -0
  88. polyfile/kaitai/parsers/gzip.py +232 -0
  89. polyfile/kaitai/parsers/hashcat_restore.py +60 -0
  90. polyfile/kaitai/parsers/hccap.py +111 -0
  91. polyfile/kaitai/parsers/hccapx.py +103 -0
  92. polyfile/kaitai/parsers/heaps_pak.py +177 -0
  93. polyfile/kaitai/parsers/heroes_of_might_and_magic_agg.py +116 -0
  94. polyfile/kaitai/parsers/heroes_of_might_and_magic_bmp.py +34 -0
  95. polyfile/kaitai/parsers/icmp_packet.py +136 -0
  96. polyfile/kaitai/parsers/ico.py +129 -0
  97. polyfile/kaitai/parsers/id3v1_1.py +220 -0
  98. polyfile/kaitai/parsers/id3v2_3.py +324 -0
  99. polyfile/kaitai/parsers/id3v2_4.py +423 -0
  100. polyfile/kaitai/parsers/ines.py +282 -0
  101. polyfile/kaitai/parsers/ipv4_packet.py +158 -0
  102. polyfile/kaitai/parsers/ipv6_packet.py +55 -0
  103. polyfile/kaitai/parsers/iso9660.py +544 -0
  104. polyfile/kaitai/parsers/java_class.py +1113 -0
  105. polyfile/kaitai/parsers/jpeg.py +361 -0
  106. polyfile/kaitai/parsers/luks.py +149 -0
  107. polyfile/kaitai/parsers/lzh.py +165 -0
  108. polyfile/kaitai/parsers/mac_os_resource_snd.py +493 -0
  109. polyfile/kaitai/parsers/mach_o.py +3033 -0
  110. polyfile/kaitai/parsers/mach_o_fat.py +92 -0
  111. polyfile/kaitai/parsers/magicavoxel_vox.py +391 -0
  112. polyfile/kaitai/parsers/manifest.json +1 -0
  113. polyfile/kaitai/parsers/mbr_partition_table.py +119 -0
  114. polyfile/kaitai/parsers/mcap.py +1015 -0
  115. polyfile/kaitai/parsers/microsoft_cfb.py +293 -0
  116. polyfile/kaitai/parsers/microsoft_network_monitor_v2.py +309 -0
  117. polyfile/kaitai/parsers/microsoft_pe.py +765 -0
  118. polyfile/kaitai/parsers/mifare_classic.py +706 -0
  119. polyfile/kaitai/parsers/minecraft_nbt.py +449 -0
  120. polyfile/kaitai/parsers/monomakh_sapr_chg.py +69 -0
  121. polyfile/kaitai/parsers/mozilla_mar.py +239 -0
  122. polyfile/kaitai/parsers/mp4.py +333 -0
  123. polyfile/kaitai/parsers/msgpack.py +467 -0
  124. polyfile/kaitai/parsers/nitf.py +1189 -0
  125. polyfile/kaitai/parsers/nt_mdt_pal.py +155 -0
  126. polyfile/kaitai/parsers/ogg.py +118 -0
  127. polyfile/kaitai/parsers/openpgp_message.py +993 -0
  128. polyfile/kaitai/parsers/packet_ppi.py +515 -0
  129. polyfile/kaitai/parsers/pcap.py +344 -0
  130. polyfile/kaitai/parsers/pcf_font.py +506 -0
  131. polyfile/kaitai/parsers/pcx.py +195 -0
  132. polyfile/kaitai/parsers/pcx_dcx.py +79 -0
  133. polyfile/kaitai/parsers/phar_without_stub.py +399 -0
  134. polyfile/kaitai/parsers/php_serialized_value.py +505 -0
  135. polyfile/kaitai/parsers/png.py +721 -0
  136. polyfile/kaitai/parsers/protocol_body.py +260 -0
  137. polyfile/kaitai/parsers/psx_tim.py +104 -0
  138. polyfile/kaitai/parsers/python_pickle.py +718 -0
  139. polyfile/kaitai/parsers/python_pyc_27.py +510 -0
  140. polyfile/kaitai/parsers/quake_mdl.py +441 -0
  141. polyfile/kaitai/parsers/quake_pak.py +112 -0
  142. polyfile/kaitai/parsers/quicktime_mov.py +634 -0
  143. polyfile/kaitai/parsers/rar.py +265 -0
  144. polyfile/kaitai/parsers/regf.py +569 -0
  145. polyfile/kaitai/parsers/renderware_binary_stream.py +877 -0
  146. polyfile/kaitai/parsers/resource_fork.py +611 -0
  147. polyfile/kaitai/parsers/respack.py +57 -0
  148. polyfile/kaitai/parsers/riff.py +409 -0
  149. polyfile/kaitai/parsers/rpm.py +964 -0
  150. polyfile/kaitai/parsers/rtcp_payload.py +579 -0
  151. polyfile/kaitai/parsers/rtp_packet.py +150 -0
  152. polyfile/kaitai/parsers/rtpdump.py +115 -0
  153. polyfile/kaitai/parsers/ruby_marshal.py +423 -0
  154. polyfile/kaitai/parsers/s3m.py +493 -0
  155. polyfile/kaitai/parsers/saints_row_2_vpp_pc.py +254 -0
  156. polyfile/kaitai/parsers/shapefile_index.py +174 -0
  157. polyfile/kaitai/parsers/shapefile_main.py +893 -0
  158. polyfile/kaitai/parsers/some_ip.py +209 -0
  159. polyfile/kaitai/parsers/some_ip_container.py +37 -0
  160. polyfile/kaitai/parsers/some_ip_sd.py +86 -0
  161. polyfile/kaitai/parsers/some_ip_sd_entries.py +160 -0
  162. polyfile/kaitai/parsers/some_ip_sd_options.py +374 -0
  163. polyfile/kaitai/parsers/specpr.py +404 -0
  164. polyfile/kaitai/parsers/sqlite3.py +472 -0
  165. polyfile/kaitai/parsers/ssh_public_key.py +252 -0
  166. polyfile/kaitai/parsers/standard_midi_file.py +390 -0
  167. polyfile/kaitai/parsers/stl.py +111 -0
  168. polyfile/kaitai/parsers/sudoers_ts.py +201 -0
  169. polyfile/kaitai/parsers/swf.py +406 -0
  170. polyfile/kaitai/parsers/systemd_journal.py +361 -0
  171. polyfile/kaitai/parsers/tcp_segment.py +57 -0
  172. polyfile/kaitai/parsers/tga.py +213 -0
  173. polyfile/kaitai/parsers/tls_client_hello.py +293 -0
  174. polyfile/kaitai/parsers/tr_dos_image.py +322 -0
  175. polyfile/kaitai/parsers/tsm.py +198 -0
  176. polyfile/kaitai/parsers/ttf.py +1847 -0
  177. polyfile/kaitai/parsers/udp_datagram.py +42 -0
  178. polyfile/kaitai/parsers/uefi_te.py +236 -0
  179. polyfile/kaitai/parsers/uimage.py +198 -0
  180. polyfile/kaitai/parsers/utf8_string.py +137 -0
  181. polyfile/kaitai/parsers/vfat.py +410 -0
  182. polyfile/kaitai/parsers/vlq_base128_be.py +104 -0
  183. polyfile/kaitai/parsers/vlq_base128_le.py +129 -0
  184. polyfile/kaitai/parsers/vmware_vmdk.py +167 -0
  185. polyfile/kaitai/parsers/vp8_ivf.py +112 -0
  186. polyfile/kaitai/parsers/warcraft_2_pud.py +423 -0
  187. polyfile/kaitai/parsers/wav.py +1014 -0
  188. polyfile/kaitai/parsers/websocket.py +167 -0
  189. polyfile/kaitai/parsers/windows_evt_log.py +304 -0
  190. polyfile/kaitai/parsers/windows_lnk_file.py +467 -0
  191. polyfile/kaitai/parsers/windows_minidump.py +575 -0
  192. polyfile/kaitai/parsers/windows_resource_file.py +243 -0
  193. polyfile/kaitai/parsers/windows_shell_items.py +190 -0
  194. polyfile/kaitai/parsers/windows_systemtime.py +52 -0
  195. polyfile/kaitai/parsers/wmf.py +502 -0
  196. polyfile/kaitai/parsers/xar.py +181 -0
  197. polyfile/kaitai/parsers/xwd.py +189 -0
  198. polyfile/kaitai/parsers/zip.py +685 -0
  199. polyfile/kaitai/parsers/zisofs.py +158 -0
  200. polyfile/kaitai/parsers/zx_spectrum_tap.py +184 -0
  201. polyfile/kaitaimatcher.py +113 -0
  202. polyfile/languagematcher.py +217 -0
  203. polyfile/logger.py +135 -0
  204. polyfile/magic.py +2983 -0
  205. polyfile/magic_defs/COPYING +29 -0
  206. polyfile/magic_defs/__init__.py +0 -0
  207. polyfile/magic_defs/acorn +102 -0
  208. polyfile/magic_defs/adi +13 -0
  209. polyfile/magic_defs/adventure +122 -0
  210. polyfile/magic_defs/aes +29 -0
  211. polyfile/magic_defs/algol68 +35 -0
  212. polyfile/magic_defs/allegro +9 -0
  213. polyfile/magic_defs/alliant +18 -0
  214. polyfile/magic_defs/alpha +32 -0
  215. polyfile/magic_defs/amanda +12 -0
  216. polyfile/magic_defs/amigaos +218 -0
  217. polyfile/magic_defs/android +259 -0
  218. polyfile/magic_defs/animation +1197 -0
  219. polyfile/magic_defs/aout +46 -0
  220. polyfile/magic_defs/apache +28 -0
  221. polyfile/magic_defs/apl +7 -0
  222. polyfile/magic_defs/apple +773 -0
  223. polyfile/magic_defs/application +7 -0
  224. polyfile/magic_defs/applix +13 -0
  225. polyfile/magic_defs/apt +52 -0
  226. polyfile/magic_defs/archive +2586 -0
  227. polyfile/magic_defs/aria +38 -0
  228. polyfile/magic_defs/arm +50 -0
  229. polyfile/magic_defs/asf +132 -0
  230. polyfile/magic_defs/assembler +18 -0
  231. polyfile/magic_defs/asterix +18 -0
  232. polyfile/magic_defs/att3b +41 -0
  233. polyfile/magic_defs/audio +1291 -0
  234. polyfile/magic_defs/avm +33 -0
  235. polyfile/magic_defs/basis +18 -0
  236. polyfile/magic_defs/beetle +7 -0
  237. polyfile/magic_defs/ber +65 -0
  238. polyfile/magic_defs/bflt +14 -0
  239. polyfile/magic_defs/bhl +10 -0
  240. polyfile/magic_defs/bioinformatics +178 -0
  241. polyfile/magic_defs/biosig +154 -0
  242. polyfile/magic_defs/blackberry +8 -0
  243. polyfile/magic_defs/blcr +25 -0
  244. polyfile/magic_defs/blender +50 -0
  245. polyfile/magic_defs/blit +24 -0
  246. polyfile/magic_defs/bm +10 -0
  247. polyfile/magic_defs/bout +11 -0
  248. polyfile/magic_defs/bsdi +33 -0
  249. polyfile/magic_defs/bsi +10 -0
  250. polyfile/magic_defs/btsnoop +13 -0
  251. polyfile/magic_defs/burp +7 -0
  252. polyfile/magic_defs/bytecode +41 -0
  253. polyfile/magic_defs/c-lang +110 -0
  254. polyfile/magic_defs/c64 +531 -0
  255. polyfile/magic_defs/cad +437 -0
  256. polyfile/magic_defs/cafebabe +107 -0
  257. polyfile/magic_defs/cbor +21 -0
  258. polyfile/magic_defs/ccf +14 -0
  259. polyfile/magic_defs/cddb +12 -0
  260. polyfile/magic_defs/chord +15 -0
  261. polyfile/magic_defs/cisco +12 -0
  262. polyfile/magic_defs/citrus +12 -0
  263. polyfile/magic_defs/clarion +27 -0
  264. polyfile/magic_defs/claris +48 -0
  265. polyfile/magic_defs/clipper +65 -0
  266. polyfile/magic_defs/clojure +30 -0
  267. polyfile/magic_defs/coff +98 -0
  268. polyfile/magic_defs/commands +201 -0
  269. polyfile/magic_defs/communications +22 -0
  270. polyfile/magic_defs/compress +461 -0
  271. polyfile/magic_defs/console +1213 -0
  272. polyfile/magic_defs/convex +69 -0
  273. polyfile/magic_defs/coverage +91 -0
  274. polyfile/magic_defs/cracklib +14 -0
  275. polyfile/magic_defs/crypto +31 -0
  276. polyfile/magic_defs/csv +8 -0
  277. polyfile/magic_defs/ctags +6 -0
  278. polyfile/magic_defs/ctf +23 -0
  279. polyfile/magic_defs/cubemap +8 -0
  280. polyfile/magic_defs/cups +56 -0
  281. polyfile/magic_defs/dact +11 -0
  282. polyfile/magic_defs/database +886 -0
  283. polyfile/magic_defs/dataone +47 -0
  284. polyfile/magic_defs/dbpf +15 -0
  285. polyfile/magic_defs/der +146 -0
  286. polyfile/magic_defs/diamond +12 -0
  287. polyfile/magic_defs/dif +33 -0
  288. polyfile/magic_defs/diff +41 -0
  289. polyfile/magic_defs/digital +59 -0
  290. polyfile/magic_defs/dolby +69 -0
  291. polyfile/magic_defs/dsf +25 -0
  292. polyfile/magic_defs/dump +96 -0
  293. polyfile/magic_defs/dwarfs +45 -0
  294. polyfile/magic_defs/dyadic +61 -0
  295. polyfile/magic_defs/ebml +8 -0
  296. polyfile/magic_defs/edid +11 -0
  297. polyfile/magic_defs/editors +43 -0
  298. polyfile/magic_defs/efi +15 -0
  299. polyfile/magic_defs/elf +379 -0
  300. polyfile/magic_defs/encore +22 -0
  301. polyfile/magic_defs/epoc +62 -0
  302. polyfile/magic_defs/erlang +21 -0
  303. polyfile/magic_defs/espressif +57 -0
  304. polyfile/magic_defs/esri +28 -0
  305. polyfile/magic_defs/etf +33 -0
  306. polyfile/magic_defs/fcs +9 -0
  307. polyfile/magic_defs/filesystems +2694 -0
  308. polyfile/magic_defs/finger +16 -0
  309. polyfile/magic_defs/firmware +133 -0
  310. polyfile/magic_defs/flash +62 -0
  311. polyfile/magic_defs/flif +36 -0
  312. polyfile/magic_defs/fonts +449 -0
  313. polyfile/magic_defs/forth +82 -0
  314. polyfile/magic_defs/fortran +9 -0
  315. polyfile/magic_defs/frame +62 -0
  316. polyfile/magic_defs/freebsd +164 -0
  317. polyfile/magic_defs/fsav +128 -0
  318. polyfile/magic_defs/fusecompress +12 -0
  319. polyfile/magic_defs/games +696 -0
  320. polyfile/magic_defs/gcc +17 -0
  321. polyfile/magic_defs/gconv +10 -0
  322. polyfile/magic_defs/gentoo +85 -0
  323. polyfile/magic_defs/geo +166 -0
  324. polyfile/magic_defs/geos +20 -0
  325. polyfile/magic_defs/gimp +77 -0
  326. polyfile/magic_defs/git +13 -0
  327. polyfile/magic_defs/glibc +21 -0
  328. polyfile/magic_defs/gnome +59 -0
  329. polyfile/magic_defs/gnu +173 -0
  330. polyfile/magic_defs/gnumeric +8 -0
  331. polyfile/magic_defs/gpt +240 -0
  332. polyfile/magic_defs/gpu +28 -0
  333. polyfile/magic_defs/grace +21 -0
  334. polyfile/magic_defs/graphviz +12 -0
  335. polyfile/magic_defs/gringotts +48 -0
  336. polyfile/magic_defs/guile +13 -0
  337. polyfile/magic_defs/hardware +12 -0
  338. polyfile/magic_defs/hitachi-sh +30 -0
  339. polyfile/magic_defs/hp +433 -0
  340. polyfile/magic_defs/human68k +26 -0
  341. polyfile/magic_defs/ibm370 +52 -0
  342. polyfile/magic_defs/ibm6000 +35 -0
  343. polyfile/magic_defs/icc +214 -0
  344. polyfile/magic_defs/iff +80 -0
  345. polyfile/magic_defs/images +4210 -0
  346. polyfile/magic_defs/inform +9 -0
  347. polyfile/magic_defs/intel +310 -0
  348. polyfile/magic_defs/interleaf +9 -0
  349. polyfile/magic_defs/island +10 -0
  350. polyfile/magic_defs/ispell +63 -0
  351. polyfile/magic_defs/isz +15 -0
  352. polyfile/magic_defs/java +52 -0
  353. polyfile/magic_defs/javascript +171 -0
  354. polyfile/magic_defs/jpeg +252 -0
  355. polyfile/magic_defs/json +8 -0
  356. polyfile/magic_defs/karma +9 -0
  357. polyfile/magic_defs/kde +11 -0
  358. polyfile/magic_defs/keepass +20 -0
  359. polyfile/magic_defs/kerberos +45 -0
  360. polyfile/magic_defs/kicad +85 -0
  361. polyfile/magic_defs/kml +34 -0
  362. polyfile/magic_defs/lammps +64 -0
  363. polyfile/magic_defs/lecter +6 -0
  364. polyfile/magic_defs/lex +12 -0
  365. polyfile/magic_defs/lif +50 -0
  366. polyfile/magic_defs/linux +557 -0
  367. polyfile/magic_defs/lisp +78 -0
  368. polyfile/magic_defs/llvm +22 -0
  369. polyfile/magic_defs/locoscript +12 -0
  370. polyfile/magic_defs/lua +31 -0
  371. polyfile/magic_defs/luks +126 -0
  372. polyfile/magic_defs/m4 +11 -0
  373. polyfile/magic_defs/mach +303 -0
  374. polyfile/magic_defs/macintosh +505 -0
  375. polyfile/magic_defs/macos +7 -0
  376. polyfile/magic_defs/magic +10 -0
  377. polyfile/magic_defs/magic.mgc +0 -0
  378. polyfile/magic_defs/mail.news +132 -0
  379. polyfile/magic_defs/make +21 -0
  380. polyfile/magic_defs/map +413 -0
  381. polyfile/magic_defs/maple +109 -0
  382. polyfile/magic_defs/marc21 +30 -0
  383. polyfile/magic_defs/mathcad +8 -0
  384. polyfile/magic_defs/mathematica +188 -0
  385. polyfile/magic_defs/matroska +17 -0
  386. polyfile/magic_defs/mcrypt +52 -0
  387. polyfile/magic_defs/measure +44 -0
  388. polyfile/magic_defs/mercurial +13 -0
  389. polyfile/magic_defs/metastore +8 -0
  390. polyfile/magic_defs/meteorological +53 -0
  391. polyfile/magic_defs/microfocus +21 -0
  392. polyfile/magic_defs/mime +9 -0
  393. polyfile/magic_defs/mips +120 -0
  394. polyfile/magic_defs/mirage +8 -0
  395. polyfile/magic_defs/misctools +140 -0
  396. polyfile/magic_defs/mkid +11 -0
  397. polyfile/magic_defs/mlssa +8 -0
  398. polyfile/magic_defs/mmdf +6 -0
  399. polyfile/magic_defs/modem +92 -0
  400. polyfile/magic_defs/modulefile +9 -0
  401. polyfile/magic_defs/motorola +71 -0
  402. polyfile/magic_defs/mozilla +37 -0
  403. polyfile/magic_defs/msdos +2304 -0
  404. polyfile/magic_defs/msooxml +68 -0
  405. polyfile/magic_defs/msvc +222 -0
  406. polyfile/magic_defs/msx +309 -0
  407. polyfile/magic_defs/mup +24 -0
  408. polyfile/magic_defs/music +17 -0
  409. polyfile/magic_defs/nasa +7 -0
  410. polyfile/magic_defs/natinst +24 -0
  411. polyfile/magic_defs/ncr +49 -0
  412. polyfile/magic_defs/neko +12 -0
  413. polyfile/magic_defs/netbsd +251 -0
  414. polyfile/magic_defs/netscape +26 -0
  415. polyfile/magic_defs/netware +11 -0
  416. polyfile/magic_defs/news +13 -0
  417. polyfile/magic_defs/nifty +202 -0
  418. polyfile/magic_defs/nim-lang +29 -0
  419. polyfile/magic_defs/nitpicker +14 -0
  420. polyfile/magic_defs/numpy +9 -0
  421. polyfile/magic_defs/oasis +12 -0
  422. polyfile/magic_defs/ocaml +14 -0
  423. polyfile/magic_defs/octave +6 -0
  424. polyfile/magic_defs/ole2compounddocs +760 -0
  425. polyfile/magic_defs/olf +98 -0
  426. polyfile/magic_defs/openfst +17 -0
  427. polyfile/magic_defs/opentimestamps +16 -0
  428. polyfile/magic_defs/oric +16 -0
  429. polyfile/magic_defs/os2 +186 -0
  430. polyfile/magic_defs/os400 +39 -0
  431. polyfile/magic_defs/os9 +80 -0
  432. polyfile/magic_defs/osf1 +10 -0
  433. polyfile/magic_defs/palm +156 -0
  434. polyfile/magic_defs/parix +13 -0
  435. polyfile/magic_defs/parrot +22 -0
  436. polyfile/magic_defs/pascal +39 -0
  437. polyfile/magic_defs/pbf +11 -0
  438. polyfile/magic_defs/pbm +8 -0
  439. polyfile/magic_defs/pc88 +24 -0
  440. polyfile/magic_defs/pc98 +77 -0
  441. polyfile/magic_defs/pci_ids +116 -0
  442. polyfile/magic_defs/pcjr +8 -0
  443. polyfile/magic_defs/pdf +51 -0
  444. polyfile/magic_defs/pdp +42 -0
  445. polyfile/magic_defs/perl +100 -0
  446. polyfile/magic_defs/pgf +52 -0
  447. polyfile/magic_defs/pgp +581 -0
  448. polyfile/magic_defs/pgp-binary-keys +388 -0
  449. polyfile/magic_defs/pkgadd +7 -0
  450. polyfile/magic_defs/plan9 +25 -0
  451. polyfile/magic_defs/playdate +57 -0
  452. polyfile/magic_defs/plus5 +18 -0
  453. polyfile/magic_defs/pmem +46 -0
  454. polyfile/magic_defs/polyfile_zip +5 -0
  455. polyfile/magic_defs/polyml +23 -0
  456. polyfile/magic_defs/printer +269 -0
  457. polyfile/magic_defs/project +10 -0
  458. polyfile/magic_defs/psdbms +14 -0
  459. polyfile/magic_defs/psl +14 -0
  460. polyfile/magic_defs/pulsar +13 -0
  461. polyfile/magic_defs/puzzle +17 -0
  462. polyfile/magic_defs/pwsafe +14 -0
  463. polyfile/magic_defs/pyramid +12 -0
  464. polyfile/magic_defs/python +305 -0
  465. polyfile/magic_defs/qt +30 -0
  466. polyfile/magic_defs/revision +66 -0
  467. polyfile/magic_defs/riff +840 -0
  468. polyfile/magic_defs/rinex +44 -0
  469. polyfile/magic_defs/ringdove +45 -0
  470. polyfile/magic_defs/rpi +52 -0
  471. polyfile/magic_defs/rpm +45 -0
  472. polyfile/magic_defs/rpmsg +7 -0
  473. polyfile/magic_defs/rst +11 -0
  474. polyfile/magic_defs/rtf +94 -0
  475. polyfile/magic_defs/ruby +55 -0
  476. polyfile/magic_defs/rust +21 -0
  477. polyfile/magic_defs/sc +7 -0
  478. polyfile/magic_defs/sccs +24 -0
  479. polyfile/magic_defs/scientific +144 -0
  480. polyfile/magic_defs/securitycerts +6 -0
  481. polyfile/magic_defs/selinux +24 -0
  482. polyfile/magic_defs/sendmail +37 -0
  483. polyfile/magic_defs/sequent +42 -0
  484. polyfile/magic_defs/sereal +35 -0
  485. polyfile/magic_defs/sgi +144 -0
  486. polyfile/magic_defs/sgml +161 -0
  487. polyfile/magic_defs/sharc +23 -0
  488. polyfile/magic_defs/sinclair +40 -0
  489. polyfile/magic_defs/sisu +18 -0
  490. polyfile/magic_defs/sketch +6 -0
  491. polyfile/magic_defs/smalltalk +25 -0
  492. polyfile/magic_defs/smile +34 -0
  493. polyfile/magic_defs/sniffer +482 -0
  494. polyfile/magic_defs/softquad +40 -0
  495. polyfile/magic_defs/sosi +40 -0
  496. polyfile/magic_defs/spec +21 -0
  497. polyfile/magic_defs/spectrum +184 -0
  498. polyfile/magic_defs/sql +288 -0
  499. polyfile/magic_defs/ssh +39 -0
  500. polyfile/magic_defs/ssl +20 -0
  501. polyfile/magic_defs/statistics +45 -0
  502. polyfile/magic_defs/subtitle +38 -0
  503. polyfile/magic_defs/sun +141 -0
  504. polyfile/magic_defs/svf +5 -0
  505. polyfile/magic_defs/sylk +36 -0
  506. polyfile/magic_defs/symbos +42 -0
  507. polyfile/magic_defs/sysex +429 -0
  508. polyfile/magic_defs/tcl +29 -0
  509. polyfile/magic_defs/teapot +6 -0
  510. polyfile/magic_defs/terminfo +63 -0
  511. polyfile/magic_defs/tex +141 -0
  512. polyfile/magic_defs/tgif +7 -0
  513. polyfile/magic_defs/ti-8x +239 -0
  514. polyfile/magic_defs/timezone +42 -0
  515. polyfile/magic_defs/tplink +95 -0
  516. polyfile/magic_defs/troff +38 -0
  517. polyfile/magic_defs/tuxedo +8 -0
  518. polyfile/magic_defs/typeset +8 -0
  519. polyfile/magic_defs/uf2 +72 -0
  520. polyfile/magic_defs/unicode +15 -0
  521. polyfile/magic_defs/unisig +12 -0
  522. polyfile/magic_defs/unknown +34 -0
  523. polyfile/magic_defs/usd +21 -0
  524. polyfile/magic_defs/uterus +16 -0
  525. polyfile/magic_defs/uuencode +28 -0
  526. polyfile/magic_defs/vacuum-cleaner +54 -0
  527. polyfile/magic_defs/varied.out +46 -0
  528. polyfile/magic_defs/varied.script +21 -0
  529. polyfile/magic_defs/vax +32 -0
  530. polyfile/magic_defs/vicar +17 -0
  531. polyfile/magic_defs/virtual +307 -0
  532. polyfile/magic_defs/virtutech +12 -0
  533. polyfile/magic_defs/visx +32 -0
  534. polyfile/magic_defs/vms +30 -0
  535. polyfile/magic_defs/vmware +6 -0
  536. polyfile/magic_defs/vorbis +155 -0
  537. polyfile/magic_defs/vxl +14 -0
  538. polyfile/magic_defs/warc +16 -0
  539. polyfile/magic_defs/weak +16 -0
  540. polyfile/magic_defs/web +18 -0
  541. polyfile/magic_defs/webassembly +17 -0
  542. polyfile/magic_defs/windows +1811 -0
  543. polyfile/magic_defs/wireless +7 -0
  544. polyfile/magic_defs/wordprocessors +630 -0
  545. polyfile/magic_defs/wsdl +23 -0
  546. polyfile/magic_defs/x68000 +25 -0
  547. polyfile/magic_defs/xdelta +13 -0
  548. polyfile/magic_defs/xenix +106 -0
  549. polyfile/magic_defs/xilinx +58 -0
  550. polyfile/magic_defs/xo65 +37 -0
  551. polyfile/magic_defs/xwindows +43 -0
  552. polyfile/magic_defs/yara +17 -0
  553. polyfile/magic_defs/zfs +96 -0
  554. polyfile/magic_defs/zilog +12 -0
  555. polyfile/magic_defs/zip +126 -0
  556. polyfile/magic_defs/zyxel +17 -0
  557. polyfile/nes.py +144 -0
  558. polyfile/nitf.py +15 -0
  559. polyfile/pdf.py +1264 -0
  560. polyfile/pickles.py +45 -0
  561. polyfile/polyfile.py +409 -0
  562. polyfile/profiling.py +115 -0
  563. polyfile/repl.py +624 -0
  564. polyfile/search.py +310 -0
  565. polyfile/serialization.py +323 -0
  566. polyfile/structmatcher.py +46 -0
  567. polyfile/structs.py +281 -0
  568. polyfile/templates/download.js +162 -0
  569. polyfile/templates/hexdump.css +268 -0
  570. polyfile/templates/hexdump.js +756 -0
  571. polyfile/templates/jquery-3.4.1.min.js +2 -0
  572. polyfile/templates/template.html +119 -0
  573. polyfile/wildcards.py +62 -0
  574. polyfile/zipmatcher.py +183 -0
  575. polyfile_weave-0.5.5.dist-info/METADATA +173 -0
  576. polyfile_weave-0.5.5.dist-info/RECORD +585 -0
  577. polyfile_weave-0.5.5.dist-info/WHEEL +5 -0
  578. polyfile_weave-0.5.5.dist-info/entry_points.txt +2 -0
  579. polyfile_weave-0.5.5.dist-info/licenses/LICENSE +202 -0
  580. polyfile_weave-0.5.5.dist-info/top_level.txt +2 -0
  581. polymerge/__init__.py +1 -0
  582. polymerge/__main__.py +296 -0
  583. polymerge/cfg.py +127 -0
  584. polymerge/polymerge.py +227 -0
  585. polymerge/polytracker.py +190 -0
polyfile/magic_defs/sniffer ADDED
@@ -0,0 +1,482 @@
1
+
2
+ #------------------------------------------------------------------------------
3
+ # $File: sniffer,v 1.34 2022/12/14 18:27:36 christos Exp $
4
+ # sniffer: file(1) magic for packet capture files
5
+ #
6
+ # From: guy@alum.mit.edu (Guy Harris)
7
+ #
8
+
9
+ #
10
+ # Microsoft Network Monitor 1.x capture files.
11
+ #
12
+ 0 string RTSS NetMon capture file
13
+ >5 byte x - version %d
14
+ >4 byte x \b.%d
15
+ >6 leshort 0 (Unknown)
16
+ >6 leshort 1 (Ethernet)
17
+ >6 leshort 2 (Token Ring)
18
+ >6 leshort 3 (FDDI)
19
+ >6 leshort 4 (ATM)
20
+ >6 leshort >4 (type %d)
21
+
22
+ #
23
+ # Microsoft Network Monitor 2.x capture files.
24
+ #
25
+ 0 string GMBU NetMon capture file
26
+ >5 byte x - version %d
27
+ >4 byte x \b.%d
28
+ >6 leshort 0 (Unknown)
29
+ >6 leshort 1 (Ethernet)
30
+ >6 leshort 2 (Token Ring)
31
+ >6 leshort 3 (FDDI)
32
+ >6 leshort 4 (ATM)
33
+ >6 leshort 5 (IP-over-IEEE 1394)
34
+ >6 leshort 6 (802.11)
35
+ >6 leshort 7 (Raw IP)
36
+ >6 leshort 8 (Raw IP)
37
+ >6 leshort 9 (Raw IP)
38
+ >6 leshort >9 (type %d)
39
+
40
+ #
41
+ # Network General Sniffer capture files.
42
+ # Sorry, make that "Network Associates Sniffer capture files."
43
+ # Sorry, make that "Network General old DOS Sniffer capture files."
44
+ #
45
+ 0 string TRSNIFF\040data\040\040\040\040\032 Sniffer capture file
46
+ >33 byte 2 (compressed)
47
+ >23 leshort x - version %d
48
+ >25 leshort x \b.%d
49
+ >32 byte 0 (Token Ring)
50
+ >32 byte 1 (Ethernet)
51
+ >32 byte 2 (ARCNET)
52
+ >32 byte 3 (StarLAN)
53
+ >32 byte 4 (PC Network broadband)
54
+ >32 byte 5 (LocalTalk)
55
+ >32 byte 6 (Znet)
56
+ >32 byte 7 (Internetwork Analyzer)
57
+ >32 byte 9 (FDDI)
58
+ >32 byte 10 (ATM)
59
+
60
+ #
61
+ # Cinco Networks NetXRay capture files.
62
+ # Sorry, make that "Network General Sniffer Basic capture files."
63
+ # Sorry, make that "Network Associates Sniffer Basic capture files."
64
+ # Sorry, make that "Network Associates Sniffer Basic, and Windows
65
+ # Sniffer Pro", capture files."
66
+ # Sorry, make that "Network General Sniffer capture files."
67
+ # Sorry, make that "NetScout Sniffer capture files."
68
+ #
69
+ 0 string XCP\0 NetXRay capture file
70
+ >4 string >\0 - version %s
71
+ >44 leshort 0 (Ethernet)
72
+ >44 leshort 1 (Token Ring)
73
+ >44 leshort 2 (FDDI)
74
+ >44 leshort 3 (WAN)
75
+ >44 leshort 8 (ATM)
76
+ >44 leshort 9 (802.11)
77
+
78
+ #
79
+ # "libpcap" capture files.
80
+ # https://www.tcpdump.org/manpages/pcap-savefile.5.html
81
+ # (We call them "tcpdump capture file(s)" for now, as "tcpdump" is
82
+ # the main program that uses that format, but there are other programs
83
+ # that use "libpcap", or that use the same capture file format.)
84
+ #
85
+ 0 name pcap-be
86
+ >4 beshort x - version %d
87
+ >6 beshort x \b.%d
88
+ # clear that continuation level match
89
+ >20 clear x
90
+ >20 belong&0x03FFFFFF 0 (No link-layer encapsulation
91
+ >20 belong&0x03FFFFFF 1 (Ethernet
92
+ >20 belong&0x03FFFFFF 2 (3Mb Ethernet
93
+ >20 belong&0x03FFFFFF 3 (AX.25
94
+ >20 belong&0x03FFFFFF 4 (ProNET
95
+ >20 belong&0x03FFFFFF 5 (CHAOS
96
+ >20 belong&0x03FFFFFF 6 (Token Ring
97
+ >20 belong&0x03FFFFFF 7 (BSD ARCNET
98
+ >20 belong&0x03FFFFFF 8 (SLIP
99
+ >20 belong&0x03FFFFFF 9 (PPP
100
+ >20 belong&0x03FFFFFF 10 (FDDI
101
+ >20 belong&0x03FFFFFF 11 (RFC 1483 ATM
102
+ >20 belong&0x03FFFFFF 12 (Raw IP
103
+ >20 belong&0x03FFFFFF 13 (BSD/OS SLIP
104
+ >20 belong&0x03FFFFFF 14 (BSD/OS PPP
105
+ >20 belong&0x03FFFFFF 19 (Linux ATM Classical IP
106
+ >20 belong&0x03FFFFFF 50 (PPP or Cisco HDLC
107
+ >20 belong&0x03FFFFFF 51 (PPP-over-Ethernet
108
+ >20 belong&0x03FFFFFF 99 (Symantec Enterprise Firewall
109
+ >20 belong&0x03FFFFFF 100 (RFC 1483 ATM
110
+ >20 belong&0x03FFFFFF 101 (Raw IP
111
+ >20 belong&0x03FFFFFF 102 (BSD/OS SLIP
112
+ >20 belong&0x03FFFFFF 103 (BSD/OS PPP
113
+ >20 belong&0x03FFFFFF 104 (BSD/OS Cisco HDLC
114
+ >20 belong&0x03FFFFFF 105 (802.11
115
+ >20 belong&0x03FFFFFF 106 (Linux Classical IP over ATM
116
+ >20 belong&0x03FFFFFF 107 (Frame Relay
117
+ >20 belong&0x03FFFFFF 108 (OpenBSD loopback
118
+ >20 belong&0x03FFFFFF 109 (OpenBSD IPsec encrypted
119
+ >20 belong&0x03FFFFFF 112 (Cisco HDLC
120
+ >20 belong&0x03FFFFFF 113 (Linux cooked v1
121
+ >20 belong&0x03FFFFFF 114 (LocalTalk
122
+ >20 belong&0x03FFFFFF 117 (OpenBSD PFLOG
123
+ >20 belong&0x03FFFFFF 119 (802.11 with Prism header
124
+ >20 belong&0x03FFFFFF 122 (RFC 2625 IP over Fibre Channel
125
+ >20 belong&0x03FFFFFF 123 (SunATM
126
+ >20 belong&0x03FFFFFF 127 (802.11 with radiotap header
127
+ >20 belong&0x03FFFFFF 129 (Linux ARCNET
128
+ >20 belong&0x03FFFFFF 130 (Juniper Multi-Link PPP
129
+ >20 belong&0x03FFFFFF 131 (Juniper Multi-Link Frame Relay
130
+ >20 belong&0x03FFFFFF 132 (Juniper Encryption Services PIC
131
+ >20 belong&0x03FFFFFF 133 (Juniper GGSN PIC
132
+ >20 belong&0x03FFFFFF 134 (Juniper FRF.16 Frame Relay
133
+ >20 belong&0x03FFFFFF 135 (Juniper ATM2 PIC
134
+ >20 belong&0x03FFFFFF 136 (Juniper Advanced Services PIC
135
+ >20 belong&0x03FFFFFF 137 (Juniper ATM1 PIC
136
+ >20 belong&0x03FFFFFF 138 (Apple IP over IEEE 1394
137
+ >20 belong&0x03FFFFFF 139 (SS7 MTP2 with pseudo-header
138
+ >20 belong&0x03FFFFFF 140 (SS7 MTP2
139
+ >20 belong&0x03FFFFFF 141 (SS7 MTP3
140
+ >20 belong&0x03FFFFFF 142 (SS7 SCCP
141
+ >20 belong&0x03FFFFFF 143 (DOCSIS
142
+ >20 belong&0x03FFFFFF 144 (Linux IrDA
143
+ >20 belong&0x03FFFFFF 147 (Private use 0
144
+ >20 belong&0x03FFFFFF 148 (Private use 1
145
+ >20 belong&0x03FFFFFF 149 (Private use 2
146
+ >20 belong&0x03FFFFFF 150 (Private use 3
147
+ >20 belong&0x03FFFFFF 151 (Private use 4
148
+ >20 belong&0x03FFFFFF 152 (Private use 5
149
+ >20 belong&0x03FFFFFF 153 (Private use 6
150
+ >20 belong&0x03FFFFFF 154 (Private use 7
151
+ >20 belong&0x03FFFFFF 155 (Private use 8
152
+ >20 belong&0x03FFFFFF 156 (Private use 9
153
+ >20 belong&0x03FFFFFF 157 (Private use 10
154
+ >20 belong&0x03FFFFFF 158 (Private use 11
155
+ >20 belong&0x03FFFFFF 159 (Private use 12
156
+ >20 belong&0x03FFFFFF 160 (Private use 13
157
+ >20 belong&0x03FFFFFF 161 (Private use 14
158
+ >20 belong&0x03FFFFFF 162 (Private use 15
159
+ >20 belong&0x03FFFFFF 163 (802.11 with AVS header
160
+ >20 belong&0x03FFFFFF 164 (Juniper Passive Monitor PIC
161
+ >20 belong&0x03FFFFFF 165 (BACnet MS/TP
162
+ >20 belong&0x03FFFFFF 166 (PPPD
163
+ >20 belong&0x03FFFFFF 167 (Juniper PPPoE
164
+ >20 belong&0x03FFFFFF 168 (Juniper PPPoE/ATM
165
+ >20 belong&0x03FFFFFF 169 (GPRS LLC
166
+ >20 belong&0x03FFFFFF 170 (GPF-T
167
+ >20 belong&0x03FFFFFF 171 (GPF-F
168
+ >20 belong&0x03FFFFFF 174 (Juniper PIC Peer
169
+ >20 belong&0x03FFFFFF 175 (Ethernet with Endace ERF header
170
+ >20 belong&0x03FFFFFF 176 (Packet-over-SONET with Endace ERF header
171
+ >20 belong&0x03FFFFFF 177 (Linux LAPD
172
+ >20 belong&0x03FFFFFF 178 (Juniper Ethernet
173
+ >20 belong&0x03FFFFFF 179 (Juniper PPP
174
+ >20 belong&0x03FFFFFF 180 (Juniper Frame Relay
175
+ >20 belong&0x03FFFFFF 181 (Juniper C-HDLC
176
+ >20 belong&0x03FFFFFF 182 (FRF.16 Frame Relay
177
+ >20 belong&0x03FFFFFF 183 (Juniper Voice PIC
178
+ >20 belong&0x03FFFFFF 184 (Arinc 429
179
+ >20 belong&0x03FFFFFF 185 (Arinc 653 Interpartition Communication
180
+ >20 belong&0x03FFFFFF 186 (USB with FreeBSD header
181
+ >20 belong&0x03FFFFFF 187 (Bluetooth HCI H4
182
+ >20 belong&0x03FFFFFF 188 (802.16 MAC Common Part Sublayer
183
+ >20 belong&0x03FFFFFF 189 (Linux USB
184
+ >20 belong&0x03FFFFFF 190 (Controller Area Network (CAN) v. 2.0B
185
+ >20 belong&0x03FFFFFF 191 (802.15.4 with Linux padding
186
+ >20 belong&0x03FFFFFF 192 (PPI
187
+ >20 belong&0x03FFFFFF 193 (802.16 MAC Common Part Sublayer plus radiotap header
188
+ >20 belong&0x03FFFFFF 194 (Juniper Integrated Service Module
189
+ >20 belong&0x03FFFFFF 195 (802.15.4 with FCS
190
+ >20 belong&0x03FFFFFF 196 (SITA
191
+ >20 belong&0x03FFFFFF 197 (Endace ERF
192
+ >20 belong&0x03FFFFFF 198 (Ethernet with u10 Networks pseudo-header
193
+ >20 belong&0x03FFFFFF 199 (IPMB
194
+ >20 belong&0x03FFFFFF 200 (Juniper Secure Tunnel
195
+ >20 belong&0x03FFFFFF 201 (Bluetooth HCI H4 with pseudo-header
196
+ >20 belong&0x03FFFFFF 202 (AX.25 with KISS header
197
+ >20 belong&0x03FFFFFF 203 (LAPD
198
+ >20 belong&0x03FFFFFF 204 (PPP with direction pseudo-header
199
+ >20 belong&0x03FFFFFF 205 (Cisco HDLC with direction pseudo-header
200
+ >20 belong&0x03FFFFFF 206 (Frame Relay with direction pseudo-header
201
+ >20 belong&0x03FFFFFF 209 (Linux IPMB
202
+ >20 belong&0x03FFFFFF 215 (802.15.4 with non-ASK PHY header
203
+ >20 belong&0x03FFFFFF 216 (Linux evdev events
204
+ >20 belong&0x03FFFFFF 219 (MPLS with label as link-layer header
205
+ >20 belong&0x03FFFFFF 220 (Memory-mapped Linux USB
206
+ >20 belong&0x03FFFFFF 221 (DECT
207
+ >20 belong&0x03FFFFFF 222 (AOS Space Data Link protocol
208
+ >20 belong&0x03FFFFFF 223 (Wireless HART
209
+ >20 belong&0x03FFFFFF 224 (Fibre Channel FC-2
210
+ >20 belong&0x03FFFFFF 225 (Fibre Channel FC-2 with frame delimiters
211
+ >20 belong&0x03FFFFFF 226 (Solaris IPNET
212
+ >20 belong&0x03FFFFFF 227 (SocketCAN
213
+ >20 belong&0x03FFFFFF 228 (Raw IPv4
214
+ >20 belong&0x03FFFFFF 229 (Raw IPv6
215
+ >20 belong&0x03FFFFFF 230 (802.15.4 without FCS
216
+ >20 belong&0x03FFFFFF 231 (D-Bus messages
217
+ >20 belong&0x03FFFFFF 232 (Juniper Virtual Server
218
+ >20 belong&0x03FFFFFF 233 (Juniper SRX E2E
219
+ >20 belong&0x03FFFFFF 234 (Juniper Fibre Channel
220
+ >20 belong&0x03FFFFFF 235 (DVB-CI
221
+ >20 belong&0x03FFFFFF 236 (MUX27010
222
+ >20 belong&0x03FFFFFF 237 (STANAG 5066 D_PDUs
223
+ >20 belong&0x03FFFFFF 238 (Juniper ATM CEMIC
224
+ >20 belong&0x03FFFFFF 239 (Linux netfilter log messages
225
+ >20 belong&0x03FFFFFF 240 (Hilscher netAnalyzer
226
+ >20 belong&0x03FFFFFF 241 (Hilscher netAnalyzer with delimiters
227
+ >20 belong&0x03FFFFFF 242 (IP-over-Infiniband
228
+ >20 belong&0x03FFFFFF 243 (MPEG-2 Transport Stream packets
229
+ >20 belong&0x03FFFFFF 244 (ng4t ng40
230
+ >20 belong&0x03FFFFFF 245 (NFC LLCP
231
+ >20 belong&0x03FFFFFF 246 (Packet filter state syncing
232
+ >20 belong&0x03FFFFFF 247 (InfiniBand
233
+ >20 belong&0x03FFFFFF 248 (SCTP
234
+ >20 belong&0x03FFFFFF 249 (USB with USBPcap header
235
+ >20 belong&0x03FFFFFF 250 (Schweitzer Engineering Laboratories RTAC packets
236
+ >20 belong&0x03FFFFFF 251 (Bluetooth Low Energy air interface
237
+ >20 belong&0x03FFFFFF 252 (Wireshark Upper PDU export
238
+ >20 belong&0x03FFFFFF 253 (Linux netlink
239
+ >20 belong&0x03FFFFFF 254 (Bluetooth Linux Monitor
240
+ >20 belong&0x03FFFFFF 255 (Bluetooth Basic Rate/Enhanced Data Rate baseband packets
241
+ >20 belong&0x03FFFFFF 256 (Bluetooth Low Energy air interface with pseudo-header
242
+ >20 belong&0x03FFFFFF 257 (PROFIBUS data link layer
243
+ >20 belong&0x03FFFFFF 258 (Apple DLT_PKTAP
244
+ >20 belong&0x03FFFFFF 259 (Ethernet with 802.3 Clause 65 EPON preamble
245
+ >20 belong&0x03FFFFFF 260 (IPMI trace packets
246
+ >20 belong&0x03FFFFFF 261 (Z-Wave RF profile R1 and R2 packets
247
+ >20 belong&0x03FFFFFF 262 (Z-Wave RF profile R3 packets
248
+ >20 belong&0x03FFFFFF 263 (WattStopper Digital Lighting Mngmt/Legrand Nitoo Open Proto
249
+ >20 belong&0x03FFFFFF 264 (ISO 14443 messages
250
+ >20 belong&0x03FFFFFF 265 (IEC 62106 Radio Data System groups
251
+ >20 belong&0x03FFFFFF 266 (USB with Darwin header
252
+ >20 belong&0x03FFFFFF 267 (OpenBSD DLT_OPENFLOW
253
+ >20 belong&0x03FFFFFF 268 (IBM SDLC frames
254
+ >20 belong&0x03FFFFFF 269 (TI LLN sniffer frames
255
+ >20 belong&0x03FFFFFF 271 (Linux vsock
256
+ >20 belong&0x03FFFFFF 272 (Nordic Semiconductor Bluetooth LE sniffer frames
257
+ >20 belong&0x03FFFFFF 273 (Excentis XRA-31 DOCSIS 3.1 RF sniffer frames
258
+ >20 belong&0x03FFFFFF 274 (802.3br mPackets
259
+ >20 belong&0x03FFFFFF 275 (DisplayPort AUX channel monitoring data
260
+ >20 belong&0x03FFFFFF 276 (Linux cooked v2
261
+ >20 belong&0x03FFFFFF 278 (OpenVizsla USB
262
+ >20 belong&0x03FFFFFF 279 (Elektrobit High Speed Capture and Replay (EBHSCR)
263
+ >20 belong&0x03FFFFFF 281 (Broadcom tag
264
+ >20 belong&0x03FFFFFF 282 (Broadcom tag (prepended)
265
+ >20 belong&0x03FFFFFF 283 (802.15.4 with TAP
266
+ >20 belong&0x03FFFFFF 284 (Marvell DSA
267
+ >20 belong&0x03FFFFFF 285 (Marvell EDSA
268
+ >20 belong&0x03FFFFFF 286 (ELEE lawful intercept
269
+ >20 belong&0x03FFFFFF 287 (Z-Wave serial
270
+ >20 belong&0x03FFFFFF 288 (USB 2.0
271
+ >20 belong&0x03FFFFFF 289 (ATSC ALP
272
+ >20 belong&0x03FFFFFF 290 (Event Tracing for Windows
273
+ >20 belong&0x03FFFFFF 291 (Hilscher netANALYZER NG pseudo-footer
274
+ >20 belong&0x03FFFFFF 292 (ZBOSS NCP protocol with pseudo-header
275
+ >20 belong&0x03FFFFFF 293 (Low-Speed USB 2.0/1.1/1.0
276
+ >20 belong&0x03FFFFFF 294 (Full-Speed USB 2.0/1.1/1.0
277
+ >20 belong&0x03FFFFFF 295 (High-Speed USB 2.0
278
+ # print default match
279
+ >20 default x
280
+ >>20 belong x (linktype#%u
281
+ >16 belong x \b, capture length %u)
282
+
283
+ # packets time stamps in seconds and microseconds.
284
+ 0 ubelong 0xa1b2c3d4 pcap capture file, microseconds ts (big-endian)
285
+ !:mime application/vnd.tcpdump.pcap
286
+ >0 use pcap-be
287
+ 0 ulelong 0xa1b2c3d4 pcap capture file, microsecond ts (little-endian)
288
+ !:mime application/vnd.tcpdump.pcap
289
+ >0 use \^pcap-be
290
+
291
+ # packets time stamps in seconds and nanoseconds.
292
+ 0 ubelong 0xa1b23c4d pcap capture file, nanosecond ts (big-endian)
293
+ !:mime application/vnd.tcpdump.pcap
294
+ >0 use pcap-be
295
+ 0 ulelong 0xa1b23c4d pcap capture file, nanosecond ts (little-endian)
296
+ !:mime application/vnd.tcpdump.pcap
297
+ >0 use \^pcap-be
298
+
299
+ #
300
+ # "libpcap"-with-Alexey-Kuznetsov's-patches capture files.
301
+ #
302
+ 0 ubelong 0xa1b2cd34 pcap capture file, microsecond ts, extensions (big-endian)
303
+ >0 use pcap-be
304
+ 0 ulelong 0xa1b2cd34 pcap capture file, microsecond ts, extensions (little-endian)
305
+ >0 use \^pcap-be
306
+
307
+ #
308
+ # "pcapng" capture files.
309
+ # https://github.com/pcapng/pcapng
310
+ # Pcapng files can contain multiple sections. Printing the endianness,
311
+ # snaplen, or other information from the first SHB may be misleading.
312
+ #
313
+ 0 ubelong 0x0a0d0d0a
314
+ >8 ubelong 0x1a2b3c4d pcapng capture file
315
+ >>12 beshort x - version %d
316
+ >>14 beshort x \b.%d
317
+ 0 ulelong 0x0a0d0d0a
318
+ >8 ulelong 0x1a2b3c4d pcapng capture file
319
+ >>12 leshort x - version %d
320
+ >>14 leshort x \b.%d
321
+
322
+ #
323
+ # AIX "iptrace" capture files.
324
+ #
325
+ 0 string iptrace\0401.0 AIX iptrace capture file
326
+ 0 string iptrace\0402.0 AIX iptrace capture file
327
+
328
+ #
329
+ # Novell LANalyzer capture files.
330
+ # URL: http://www.blacksheepnetworks.com/security/info/nw/lan/trace.txt
331
+ # Reference: https://github.com/wireshark/wireshark/blob/master/wiretap/lanalyzer.c
332
+ # Update: Joerg Jenderek
333
+ #
334
+ # regular trace header record (RT_HeaderRegular)
335
+ 0 leshort 0x1001
336
+ # GRR: line above is too generic because it matches Commodore Plus/4 BASIC V3.5
337
+ # and VIC-20 BASIC V2 program
338
+ # skip many Commodore Basic program (Microzodiac.prg Minefield.prg Vic-tac-toe.prg breakvic_joy.prg)
339
+ # with invalid second record type 0 instead of "Trace receive channel name record"
340
+ >(2.s+4) leshort =0x1006h
341
+ >>0 use novell-lanalyzer
342
+ # cyclic trace header record (RT_HeaderCyclic)
343
+ 0 leshort 0x1007
344
+ >0 use novell-lanalyzer
345
+ 0 name novell-lanalyzer
346
+ >0 leshort x Novell LANalyzer capture file
347
+ # https://reposcope.com/mimetype/application/x-lanalyzer
348
+ !:mime application/x-lanalyzer
349
+ # maybe also TR2 .. TR9 TRA .. TRZ
350
+ !:ext tr1
351
+ # version like: 1.5
352
+ >4 ubyte x \b, version %u
353
+ # minor version; one byte identifying the trace file minor version number
354
+ >5 ubyte x \b.%u
355
+ # Trace header record type like: 1001~regular or 1007~cyclic
356
+ >0 leshort !0x1001 \b, record type %4.4x
357
+ # record_length[2] is the length of the data part of 1st reorcd (without "type" and "length" fields) like: 4Ch
358
+ >2 leshort x \b, record length %#x
359
+ # second record type like: 1006h~Trace receive channel name record
360
+ >(2.s+4) leshort !0x1006h \b, 2nd record type %#4.4x
361
+ >(2.s+6) leshort x \b, 2nd record length %#x
362
+ # each channel name is a null-terminated, eight-byte ASCII string like: Channel1
363
+ >(2.s+8) string x \b, names %.9s
364
+ # 2nd channel name like: Channel2
365
+ >(2.s+17) string x %.9s ...
366
+
367
+ #
368
+ # HP-UX "nettl" capture files.
369
+ # URL: https://nixdoc.net/man-pages/HP-UX/man1m/nettl.1m.html
370
+ # Reference: https://github.com/wireshark/wireshark/blob/master/wiretap/nettl.c
371
+ # Update: Joerg Jenderek
372
+ # Note: Wireshark fills "meta information header fields" with "dummy" values
373
+ # nettl_magic_hpux9[12]; for HP-UX 9.x not tested
374
+ 0 string \x00\x00\x00\x01\x00\x00\x00\x00\x00\x07\xD0\x00 HP/UX 9.x nettl capture file
375
+ !:mime application/x-nettl
376
+ !:ext trc0/trc1
377
+ # nettl_magic_hpux10[12]; for HP-UX 10.x and 11.x
378
+ 0 string \x54\x52\x00\x64\x00 HP/UX nettl capture file
379
+ # https://reposcope.com/mimetype/application/x-nettl
380
+ !:mime application/x-nettl
381
+ # maybe also TRC000 TRC001 TRC002 ...
382
+ !:ext trc0/trc1
383
+ # file_name[56]; maybe also like /tmp/raw.tr.TRC000
384
+ >12 string !/tmp/wireshark.TRC000
385
+ >>12 string x "%-.56s"
386
+ # tz[20]; like UTC
387
+ >68 string !UTC \b, tz
388
+ >>68 string x %-.20s
389
+ # host_name[9];
390
+ >88 string >\0 \b, host %-.9s
391
+ # os_vers[9]; like B.11.11
392
+ >97 string !B.11.11 \b, os
393
+ >>97 string x %-.9s
394
+ # os_v; like 55h
395
+ >>106 ubyte x (%#x)
396
+ # xxa[8]; like 0
397
+ >107 ubequad !0 \b, xxa=%#16.16llx
398
+ # model[11] like: 9000/800
399
+ >115 string !9000/800 \b, model
400
+ >>115 string x %-.11s
401
+ # unknown; probably just padding to 128 bytes like: 0406h
402
+ >126 ubeshort !0x0406h \b, at 126 %#4.4x
403
+
404
+ #
405
+ # RADCOM WAN/LAN Analyzer capture files.
406
+ #
407
+ 0 string \x42\xd2\x00\x34\x12\x66\x22\x88 RADCOM WAN/LAN Analyzer capture file
408
+
409
+ #
410
+ # NetStumbler log files. Not really packets, per se, but about as
411
+ # close as you can get. These are log files from NetStumbler, a
412
+ # Windows program, that scans for 802.11b networks.
413
+ #
414
+ 0 string NetS NetStumbler log file
415
+ >8 lelong x \b, %d stations found
416
+
417
+ #
418
+ # *Peek tagged capture files.
419
+ #
420
+ 0 string \177ver EtherPeek/AiroPeek/OmniPeek capture file
421
+
422
+ #
423
+ # Visual Networks traffic capture files.
424
+ #
425
+ 0 string \x05VNF Visual Networks traffic capture file
426
+
427
+ #
428
+ # Network Instruments Observer capture files.
429
+ #
430
+ 0 string ObserverPktBuffe Network Instruments Observer capture file
431
+
432
+ #
433
+ # Files from Accellent Group's 5View products.
434
+ #
435
+ # URL: http://www.infovista.com
436
+ # Reference: http://mark0.net/download/triddefs_xml.7z
437
+ # defs/0/5vw.trid.xml
438
+ # https://2.na.dl.wireshark.org/src/wireshark-3.6.2.tar.xz
439
+ # wireshark-3.6.2/wiretap/5views.c
440
+ # Update: Joerg Jenderek
441
+ # Note: called "5View capture" by TrID and
442
+ # "Wireshark capture file" on Windows or
443
+ # "Packet Capture (Accellent/InfoVista 5view)" by shared MIME-info database
444
+ # verified/falsified by `wireshark *.5vw`
445
+ 0 string \xaa\xaa\xaa\xaa
446
+ # skip misidentified boot/x86_64/loader/kroete.dat on Suse LEAP DVD
447
+ # by check for valid record version
448
+ >8 ulelong =0x00010000
449
+ >>0 use 5view-le
450
+ 0 name 5view-le
451
+ # t_5VW_Info_Header.Signature = CST_5VW_INFO_HEADER_KEY = 0xAAAAAAAAU
452
+ >0 ulelong x 5View capture file
453
+ # https://reposcope.com/mimetype/application/x-5view
454
+ !:mime application/x-5view
455
+ !:ext 5vw
456
+ # size of header in bytes (included signature and reserved fields); probably always 20h
457
+ >4 ulelong !0x00000020 \b, header size %#x
458
+ # version of header record; apparently always CST_5VW_INFO_RECORD_VERSION=0x00010000U
459
+ >8 ulelong !0x00010000 \b, record version %#x
460
+ # DataSize; total size of data without header like: 18h
461
+ >12 ulelong x \b, record size %#x
462
+ # filetype; type of the capture file like: 18001000h
463
+ >16 ulelong x \b, file type %#8.8x
464
+ # Reserved[3]; reserved for future use; apparently zero
465
+ >20 quad !0 \b, Reserved %#llx
466
+ # look for record header key CST_5VW_RECORDS_HEADER_KEY of structure t_5VW_TimeStamped_Header
467
+ >0x20 search/0xB8/b \xEE\xEE\x33\x33 \b; record
468
+ # HeaderSize; actual size of this header in bytes like: 32 24h
469
+ >>&0 uleshort x size %#x
470
+ # HeaderType; exact type of this header; probably always 0x4000
471
+ >>&2 uleshort !0x4000 \b, header type %#x
472
+ # RecType; type of record like: 80000000h
473
+ >>&4 ulelong x \b, record type %#x
474
+ # RecSubType; subtype of record like: 0
475
+ >>&8 ulelong !0 \b, subtype %#x
476
+ # RecSize; Size of one record like: 5Ch
477
+ >>&12 ulelong x \b, RecSize %#x
478
+ # RecNb; Number of records like: 1
479
+ >>&16 ulelong >1 \b, %#x records
480
+ # Timestamp Utc
481
+ #>>&20 ulelong x \b, RAW TIME %#8.8x
482
+ >>&20 date x \b, Time-stamp %s
polyfile/magic_defs/softquad ADDED
@@ -0,0 +1,40 @@
1
+
2
+ #------------------------------------------------------------------------------
3
+ # $File: softquad,v 1.14 2022/10/28 17:19:54 christos Exp $
4
+ # softquad: file(1) magic for SoftQuad Publishing Software
5
+ # URL: https://en.wikipedia.org/wiki/SoftQuad_Software
6
+ #
7
+ # Author/Editor and RulesBuilder
8
+ #
9
+ # XXX - byte order?
10
+ #
11
+ 0 string \<!SQ\ DTD> Compiled SGML rules file
12
+ >9 string >\0 Type %s
13
+ 0 string \<!SQ\ A/E> A/E SGML Document binary
14
+ >9 string >\0 Type %s
15
+ 0 string \<!SQ\ STS> A/E SGML binary styles file
16
+ >9 string >\0 Type %s
17
+ 0 short 0xc0de Compiled PSI (v1) data
18
+ 0 short 0xc0da Compiled PSI (v2) data
19
+ >3 string >\0 (%s)
20
+ # Binary sqtroff font/desc files...
21
+ # GRR: the line below is also true for 5View capture file handled by ./sniffer
22
+ 0 short 0125252
23
+ # skip 5View capture file with "invalid" version AAAAh
24
+ >2 short >0 SoftQuad DESC or font file binary - version %d
25
+ # Bitmaps...
26
+ 0 search/1 SQ\ BITMAP1 SoftQuad Raster Format text
27
+ #0 string SQ\ BITMAP2 SoftQuad Raster Format data
28
+ # sqtroff intermediate language (replacement for ditroff int. lang.)
29
+ 0 string X\ SoftQuad troff Context intermediate
30
+ >2 string 495 for AT&T 495 laser printer
31
+ >2 string hp for Hewlett-Packard LaserJet
32
+ >2 string impr for IMAGEN imPRESS
33
+ >2 string ps for PostScript
34
+
35
+ # From: Michael Piefel <piefel@debian.org>
36
+ # sqtroff intermediate language (replacement for ditroff int. lang.)
37
+ 0 string X\ 495 SoftQuad troff Context intermediate for AT&T 495 laser printer
38
+ 0 string X\ hp SoftQuad troff Context intermediate for HP LaserJet
39
+ 0 string X\ impr SoftQuad troff Context intermediate for IMAGEN imPRESS
40
+ 0 string X\ ps SoftQuad troff Context intermediate for PostScript
polyfile/magic_defs/sosi ADDED
@@ -0,0 +1,40 @@
1
+
2
+ #------------------------------------------------------------------------------
3
+ # $File: sosi,v 1.2 2021/02/23 00:51:10 christos Exp $
4
+ # SOSI
5
+ # Summary: Systematic Organization of Spatial Information
6
+ # Long description: Norwegian text based map format
7
+ # File extension: .sos
8
+ # Full name: Petter Reinholdtsen (pere@hungry.com)
9
+ # Reference: https://en.wikipedia.org/wiki/SOSI
10
+ #
11
+ # Example SOSI files available from
12
+ # https://trac.osgeo.org/gdal/ticket/3638
13
+ # https://nedlasting.geonorge.no/geonorge/Basisdata/N50Kartdata/SOSI/
14
+ # https://nedlasting.geonorge.no/geonorge/Samferdsel/Elveg/SOSI/
15
+ #
16
+ # Start with optional comments (from "!" to the next line end)
17
+ # followed by ".HODE" and end with "\n.SLUTT" followed by an optional
18
+ # separator (any number of " ", "\t", "\n" or "\r"), might have BOM at
19
+ # the start and following ".HODE" near the start there is "..OMR=C3=85DE"
20
+ # (either UTF-8, ISO-8859-1 or some 7 bit Norwegian charset based on
21
+ # ASCII) , "..TRANSPAR", "..TEGNSETT " followed by the charset and a
22
+ # separator, as well as "..SOSI-VERSJON " followed by the format
23
+ # version and a separator.
24
+ #
25
+ # FIXME figure out how to accept any of [space], [tab], [newline] and
26
+ # [carriage return] as separators, not only line end.
27
+
28
+ # Not searching for full "OMR=C3=85DE" to match also for non-UTF-8
29
+ # character sets
30
+ 0 search ..OMR
31
+ >0 search ..TRANSPAR
32
+ >>0 search .HODE SOSI map data
33
+ >>>&0 search ..SOSI-VERSJON
34
+ >>>>&1 string x \b, version %s
35
+ # FIXME could not figure out way to make a match for .SLUTT at the end required
36
+ #>-7 string \n.SLUTT slutt
37
+ #>-8 string \n.SLUTT\n slutt-nl
38
+ #>-9 string \n.SLUTT\r\n slutt-crnl2
39
+ !:mime text/vnd.sosi
40
+ !:ext sos
polyfile/magic_defs/spec ADDED
@@ -0,0 +1,21 @@
1
+
2
+ #------------------------------------------------------------------------------
3
+ # $File: spec,v 1.4 2009/09/19 16:28:12 christos Exp $
4
+ # spec: file(1) magic for SPEC raw results (*.raw, *.rsf)
5
+ #
6
+ # Cloyce D. Spradling <cloyce@headgear.org>
7
+
8
+ 0 string spec SPEC
9
+ >4 string .cpu CPU
10
+ >>8 string <: \b%.4s
11
+ >>12 string . raw result text
12
+
13
+ 17 string version=SPECjbb SPECjbb
14
+ >32 string <: \b%.4s
15
+ >>37 string <: v%.4s raw result text
16
+
17
+ 0 string BEGIN\040SPECWEB SPECweb
18
+ >13 string <: \b%.2s
19
+ >>15 string _SSL \b_SSL
20
+ >>>20 string <: v%.4s raw result text
21
+ >>16 string <: v%.4s raw result text