Lines Matching +full:no +full:- +full:1 +full:- +full:8 +full:- +full:v
2 #------------------------------------------------------------------------------
3 # $File: database,v 1.73 2024/11/09 19:54:36 christos Exp $
4 # database: file(1) magic for various databases
12 0 belong 0x13579acd GNU dbm 1.x or ndbm database, big endian, 32-bit
13 !:mime application/x-gdbm
14 0 belong 0x13579ace GNU dbm 1.x or ndbm database, big endian, old
15 !:mime application/x-gdbm
16 0 belong 0x13579acf GNU dbm 1.x or ndbm database, big endian, 64-bit
17 !:mime application/x-gdbm
18 0 lelong 0x13579acd GNU dbm 1.x or ndbm database, little endian, 32-bit
19 !:mime application/x-gdbm
20 0 lelong 0x13579ace GNU dbm 1.x or ndbm database, little endian, old
21 !:mime application/x-gdbm
22 0 lelong 0x13579acf GNU dbm 1.x or ndbm database, little endian, 64-bit
23 !:mime application/x-gdbm
25 !:mime application/x-gdbm
29 # Ian Darwin's file /etc/magic files: big/little-endian version.
36 !:mime application/x-dbm
37 >8 belong 4321
40 >>4 belong >0 (Hash, version %d, native byte-order)
41 >8 belong 1234
44 >>4 belong >0 (Hash, version %d, little-endian)
47 >8 belong 4321
50 >>4 belong >0 (Hash, version %d, big-endian)
51 >8 belong 1234
54 >>4 belong >0 (Hash, version %d, native byte-order)
57 >4 long >0 (Btree, version %d, native byte-order)
59 >4 belong >0 (Btree, version %d, big-endian)
61 >4 lelong >0 (Btree, version %d, little-endian)
64 >16 long >0 (Hash, version %d, native byte-order)
66 >16 belong >0 (Hash, version %d, big-endian)
68 >16 lelong >0 (Hash, version %d, little-endian)
71 >16 long >0 (Btree, version %d, native byte-order)
73 >16 belong >0 (Btree, version %d, big-endian)
75 >16 lelong >0 (Btree, version %d, little-endian)
78 >16 long >0 (Queue, version %d, native byte-order)
80 >16 belong >0 (Queue, version %d, big-endian)
82 >16 lelong >0 (Queue, version %d, little-endian)
86 >16 long >0 (Log, version %d, native byte-order)
88 >16 belong >0 (Log, version %d, big-endian)
90 >16 lelong >0 (Log, version %d, little-endian)
99 >>>10 bedouble 8.642135e+130 big-endian
104 >>>>12 bedouble 8.642135e+130 big-endian
107 >>>>12 ledouble 8.642135e+130 little-endian
110 >>>>12 string \x43\x2b\x1f\x5b\x2f\x25\xc0\xc7 middle-endian
113 >>8 quad 0 64bit aligned
114 >>>16 bedouble 8.642135e+130 big-endian
117 >>>16 ledouble 8.642135e+130 little-endian
121 #----------------------------------------------------------------------
122 # ROOT: file(1) magic for ROOT databases
132 #>0x39 byte 3 v. 3.0
133 #>0x39 byte 4 v. 3.5
134 #>0x39 byte 9 v. 4.x
135 #>0x39 byte 10 v. 5.x
136 #>0x39 byte 11 v. 5.x
137 #>0x39 byte 12 v. 7.x
139 #>>0x04 byte 1 primary index .PX file
140 #>>0x04 byte 2 non-indexed .DB data file
141 #>>0x04 byte 3 non-incrementing secondary index .Xnn file
144 #>>0x04 byte 6 non-incrementing secondary index .XGn file
146 #>>>0x04 byte 8 incrementing secondary index .XGn file
152 # inspect VVYYMMDD , where 1<= MM <= 12 and 1<= DD <= 31
155 # skip Infocom game Z-machine
160 # 1 < version VV
161 >>>>0 ubyte >1
170 # for Xbase Database file (*.DBF) reserved (NULL) for multi-user
178 >>>>>>>>>>8 uleshort >31
181 #!:mime application/x-dbf; charset=unknown-8bit ??
182 #!:mime application/x-dbase
183 >>>>>>>>>>>>0 use xbase-type
189 >>>>>>>>>>>>4 lelong 0 \b, no records
192 >>>>>>>>>>>>>4 lelong >1 \bs
194 # 1 <= record size <= 4000 (dBase 3,4) or 32 * KB (=0x8000)
197 >>>>>>>>>>>>1 ubyte x \b, update-date
198 >>>>>>>>>>>>1 use xbase-date
199 # https://msdn.microsoft.com/de-de/library/cc483186(v=vs.71).aspx
203 #>>>>>>>>>>>>28 ubyte&0x01 0 \b, no index file
205 >>>>>>>>>>>>28 ubyte&0x01 1 \b, with index file .MDX
208 # 1st record offset + 1 = header size
209 >>>>>>>>>>>>8 uleshort >0
210 >>>>>>>>>>>>(8.s+1) ubyte >0
211 >>>>>>>>>>>>>8 uleshort >0 \b, at offset %d
212 >>>>>>>>>>>>>(8.s+1) ubyte >0
213 >>>>>>>>>>>>>>&-1 string >\0 1st record "%s"
225 #!:mime application/x-mdx
226 >>>>>>>>>>>>>>0 use xbase-type
228 >>>>>>>>>>>>>>1 ubyte x \b, creation-date
229 >>>>>>>>>>>>>>1 use xbase-date
230 >>>>>>>>>>>>>>44 ubyte x \b, update-date
231 >>>>>>>>>>>>>>44 use xbase-date
232 # No.of tags in use (1,2,5,12)
234 # No. of entries in tag (0x30)
238 # 1st tag name_
239 >>>>>>>>>>>>>548 string x \b, 1st tag "%.11s"
244 0 name xbase-type
246 # 1 < version
247 >0 ubyte >1
249 !:mime application/x-dbf
250 # like: ACCESS.DBF USER.DBF dbase3date.dbf mitarbei.dbf produkte.dbf umlaut-test-v2.dbf
251 # FoxBase+/dBaseIII+, no memo
253 !:mime application/x-dbf
255 # dBASE IV no memo file
257 !:mime application/x-dbf
258 # like: Quattro-test11.dbf umlaut-test-v4.dbf
259 # dBASE V no memo file
260 >>0 ubyte 0x05 dBase V
261 !:mime application/x-dbf
262 # like: dbase4double.dbf Quattro-test2.dbf umlaut-test7.dbf
266 !:mime application/x-dbf
268 # https://docs.microsoft.com/en-us/previous-versions/visualstudio/foxpro/st4a0s68(v=vs.80)
269 >>0 ubyte 0x2F FoxBase+/Dbase III plus, no memo
270 !:mime application/x-dbf
271 # no example
273 !:mime application/x-dbf
275 # Microsoft Visual FoxPro Database Container File like: FOXPRO-DB-TEST.DBC TESTDATA.DBC TASTRADE.DBC
277 !:mime application/x-dbf
281 !:mime application/x-dbf
283 # dBASE IV SQL, no memo;dbv memo var size (Flagship)
285 !:mime application/x-dbf
287 # https://docs.microsoft.com/en-us/previous-versions/visualstudio/foxpro/st4a0s68(v=vs.80)
289 #!:mime application/x-dbf
290 # no example
293 !:mime application/x-dbf
295 # https://docs.microsoft.com/en-us/previous-versions/visualstudio/foxpro/st4a0s68(v=vs.80)
297 #!:mime application/x-dbf
298 # no example
301 !:mime application/x-dbf
305 !:mime application/x-dbf
307 # https://docs.microsoft.com/en-us/previous-versions/visualstudio/foxpro/st4a0s68(v=vs.80)
309 #!:mime application/x-dbf
310 # no example
313 !:mime application/x-dbf
315 # dBase IV with SQL Table,no memo?
317 !:mime application/x-dbf
318 # like: dbase5.DBF test3memo.DBF test-memo.DBF
321 !:mime application/x-dbf
322 # no example
323 # https://docs.microsoft.com/en-us/previous-versions/visualstudio/foxpro/st4a0s68(v=vs.80)
325 #!:mime application/x-dbf
326 # no example
329 !:mime application/x-dbf
330 # like: dbase5.DBF test3memo.DBF test-memo.DBF
331 # HiPer-Six format;Clipper SIX, with SMT memo file
333 !:mime application/x-dbf
334 # like: dbase5.DBF test3memo.DBF test-memo.DBF testClipper.dbf DATA.DBF
335 # https://docs.microsoft.com/en-us/previous-versions/visualstudio/foxpro/st4a0s68(v=vs.80)
337 #!:mime application/x-dbf
338 # no example
340 !:mime application/x-dbf
344 !:mime application/x-dbf
346 # https://docs.microsoft.com/en-us/previous-versions/visualstudio/foxpro/st4a0s68(v=vs.80)
348 #!:mime application/x-dbf
349 # no example
352 !:mime application/x-dbf
362 0 name xbase-date
363 # inspect YYMMDD , where 1<= MM <= 12 and 1<= DD <= 31
365 >1 ubyte <13
366 >>1 ubyte >0
372 # YY is interpreted 1900+YY; TODO: display yy or 20yy instead 1YY
374 >>>>>1 ubyte x \b-%d
375 >>>>>2 ubyte x \b-%d
378 # https://msdn.microsoft.com/en-us/library/8599s21w(v=vs.80).aspx
381 >>16 ubyte !1
384 # skip many JPG. ZIP, BZ2 by test for reserved bytes NULL , 0|2 , 0|1 , low byte of block size
390 # skip with invalid "low" 1st item "\0\0\0\0" StateRepository-Deployment.srd-shm "\001\010\0\0" gcry_cast5.mod
392 # skip with valid 1st item "rintf" keylayouts.mod
393 # by looking for valid terminating character Ctrl-Z like in test.dbt
396 # by checking second terminating character Ctrl-Z like in test.dbt
398 # dBASE III DBT with two Ctr-Z terminating characters
399 >>>>>>>>>>0 use dbase3-memo-print
400 # second terminating character \0 like in dbase-memo.dbt or GRUB nativedisk.mod
404 # like dbase-memo.dbt
405 >>>>>>>>>>>0 use dbase3-memo-print
411 >>>>>>>>8 ulong =0
419 >>>>>>>>>>>>>0 use foxpro-memo-print
423 # skip WinStore.App.exe by looking for printable 2nd character of 1st memo item
425 # skip DOS executables CPQ0TD.DRV E30ODI.COM IBM0MONO.DRV by looking for printable 1st character of 1st memo item
427 # skip few (14/758) Microsoft Event Trace Logs (boot_BASE+CSWITCH_1.etl DlTel-Merge.etl UpdateUx.006.etl) with invalid "high" 1st item \377\377
430 # some probably old GRUB modules (part_sun.mod) and virtual-boy-wario-land.vb.
431 # by looking for valid terminating character Ctrl-Z
435 # dBASE III DBT with two Ctr-Z terminating characters like dbase3dbt0_1.dbt dbase_83.dbt
437 >>>>>>>>>>>>>>>0 use dbase3-memo-print
438 # second terminating character \0 like in pcidump.mod or fsadress.dbt umlaut-dbf-cmd.dbt
442 # dBASE III DBT with Ctr-Z + \0 terminating characters like fsadress.dbt
444 # unusual dBASE III DBT like fsadress.dbt umlaut-dbf-cmd.dbt
445 >>>>>>>>>>>>>>>>0 use dbase3-memo-print
447 >>>>>>>>8 ubelong !0
452 # skip AI070GEP.EPS by printable 1st character of 1st memo item
456 # skip gluon-ffhat-1.0-tp-link-tl-wr1043n-nd-v2-sysupgrade.bin by printable 2nd character
458 # skip few (8/758) Microsoft Event Trace Logs (WBEngine.3.etl Wifi.etl) with valid 1st item like
459 # "9600.20369.amd64fre.winblue_ltsb_escrow.220427-1727"
460 # "9600.19846.amd64fre.winblue_ltsb_escrow.200923-1735"
461 # "10586.494.amd64fre.th2_release_sec.160630-1736"
462 # by looking for valid terminating character Ctrl-Z
464 # followed by second character Ctrl-Z implies typical DBT
467 >>>>>>>>>>>>>>>>0 use dbase3-memo-print
469 # no example found here with terminating sequence CTRL-Z + \0
470 >>>>>>>>>>>>>>>>0 use dbase3-memo-print
477 >>>>>>>>>0 use dbase4-memo-print
480 0 name dbase3-memo-print
482 !:mime application/x-dbt
489 # no positive block length
494 >512 string >\0 \b, 1st item "%s"
496 #>512 ubelong x \b, 1ST item %#8.8x
499 # fsadress.dbt has 1 Ctrl-Z terminator followed by nil byte
500 #>>&0 ubyte 0 1xCTRL_Z
504 0 name dbase4-memo-print
506 !:mime application/x-dbt
508 # 8 character shorted main name of corresponding dBASE IV DBF file
509 >8 ubelong >0x20000000
512 >>>8 string >\0 \b of %-.8s.DBF
525 >>>&-4 use dbase4-memofield-print
529 >>>&-4 use dbase4-memofield-print
531 0 name dbase4-memofield-print
540 >>>8 string >\0 \b, 1st used item "%s"
541 # http://www.dbfree.org/webdocs/1-documentation/0018-developers_stuff_(advanced)/os_related_stuff/xbase_file_format.htm
543 0 name foxpro-memo-print
545 !:mime application/x-fpt
552 # field type ( 0~picture, 1~memo, 2~object )
555 >512 ubelong 1
557 >>>520 string >\0 \b, 1st item "%s"
564 # Reference: https://mark0.net/download/triddefs_xml.7z/defs/s/sybase-ianywhere-cdx.trid.xml
565 # https://mark0.net/download/triddefs_xml.7z/defs/c/cdx-vfp7.trid.xml
568 >0 use xbase-index
571 >0 use xbase-index
580 >>>0 use xbase-index
582 0 name xbase-index
584 !:mime application/x-dbase-index
589 # only 1 example like: TEST.IDX
591 # pointer to root node like: 1C00h 800h often 400h
593 # Pointer to free node list: often 0 but -1 if not present
595 # MAYBE number of pages in file (Foxbase, FoxPro 1.x) or
599 >8 ulelong !0 \b, reserved counter %#x
603 # 1~a unique index 8~index has FOR clause 32~compact index format 64~compound index header
613 # WHAT EXACTLY IS THAT? index signature like: 0 (sybase-ianywhere-cdx.trid.xml) 1 (cdx-vfp7.trid.xml)
615 # reserved area (0-bytes) til about 500, but not for uncompressed Index files *.idx
622 # Ascending or descending: 0~ascending 1~descending
624 # Total expression length (FoxPro 2) like: 0 1
626 # FOR expression pool length like: 1
627 >>506 uleshort !1 \b, FOR expression pool length %#x
630 # Key expression pool length like: 1
631 >>510 uleshort !1 \b, key expression pool length %#x
632 # 512 - 1023 Key & FOR expression pool (uncompiled)
639 # Reference: https://mark0.net/download/triddefs_xml.7z/defs/p/prf-dbase.trid.xml
641 # skip some Xbase Index files *.ndx and Infocom (Z-machine 4) *.z4 handled by ./adventure
643 >0x58 search/8 .PR2
644 >>0 use xbase-prf
646 0 name xbase-prf dBase Printer Form
647 !:mime application/x-dbase-prf
651 # MAYBE flag like: 1~with output file name 0~not
688 !:mime application/x-msaccess
690 !:mime application/x-msaccess
695 # libesedb-master/documentation/
702 !:mime application/x-ms-ese
703 # file_type 0~database 1~stream
707 >>12 ulelong 1 STreaMing
710 >>8 uleshort x \b, version %#x
716 >>52 ulelong 1 \b, JustCreated
729 8 string sdbf
735 !:mime application/x-ms-sdb
738 # TDB database from Samba et al - Martin Pool <mbp@samba.org>
740 >32 lelong 0x2601196D version 6, little-endian
747 10 string MIT-MAGIC-COOKIE-1 X11 Xauthority data
748 11 string MIT-MAGIC-COOKIE-1 X11 Xauthority data
749 12 string MIT-MAGIC-COOKIE-1 X11 Xauthority data
750 13 string MIT-MAGIC-COOKIE-1 X11 Xauthority data
751 14 string MIT-MAGIC-COOKIE-1 X11 Xauthority data
752 15 string MIT-MAGIC-COOKIE-1 X11 Xauthority data
753 16 string MIT-MAGIC-COOKIE-1 X11 Xauthority data
754 17 string MIT-MAGIC-COOKIE-1 X11 Xauthority data
755 18 string MIT-MAGIC-COOKIE-1 X11 Xauthority data
760 >5 byte x - v%d
762 >5 beshort <0x101 \b-0
764 >>7 byte x \b-%d
776 !:mime application/x-tokyocabinet-hash
777 >32 byte 1 \b, B+ tree
778 !:mime application/x-tokyocabinet-btree
779 >32 byte 2 \b, Fixed-length
780 !:mime application/x-tokyocabinet-fixed
782 !:mime application/x-tokyocabinet-table
783 >33 byte &1 \b, [open]
832 >>&1 search/2 DESIGN Panorama database
833 #!:mime application/x-panorama-database
854 >8 string x \b, for '%s'
861 # Redis RDB - https://redis.io/topics/persistence
863 >5 regex [0-9][0-9][0-9][0-9] version %s
873 0 string //\ <!--\ <mdb:mork:z\ v=" Mozilla Mork database
874 # display Mozilla Mork database (strength=260=260+0) before "exported SGML document" (strength=28=38-10) via ./sgml
877 !:mime text/x-mozilla-mork
889 # Reference: http://mark0.net/download/triddefs_xml.7z/defs/d/dat-mork.trid.xml
899 # skip start like Language=fr|CA|iso8859-1
902 !:mime text/x-dmtf-mif
906 # https://github.com/etcd-io/bbolt
911 16 belong 0xED0CDAED BoltDB database, big-endian