2020-11-20 05:36:51 +00:00
|
|
|
/**
|
|
|
|
* Copyright (c) 2020, Timothy Stack
|
|
|
|
*
|
|
|
|
* All rights reserved.
|
|
|
|
*
|
|
|
|
* Redistribution and use in source and binary forms, with or without
|
|
|
|
* modification, are permitted provided that the following conditions are met:
|
|
|
|
*
|
|
|
|
* * Redistributions of source code must retain the above copyright notice, this
|
|
|
|
* list of conditions and the following disclaimer.
|
|
|
|
* * Redistributions in binary form must reproduce the above copyright notice,
|
|
|
|
* this list of conditions and the following disclaimer in the documentation
|
|
|
|
* and/or other materials provided with the distribution.
|
|
|
|
* * Neither the name of Timothy Stack nor the names of its contributors
|
|
|
|
* may be used to endorse or promote products derived from this software
|
|
|
|
* without specific prior written permission.
|
|
|
|
*
|
|
|
|
* THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ''AS IS'' AND ANY
|
|
|
|
* EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
|
|
|
|
* WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
|
|
|
|
* DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE FOR ANY
|
|
|
|
* DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
|
|
|
|
* (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
|
|
|
|
* LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON
|
|
|
|
* ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
|
|
|
|
* (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
|
|
|
|
* SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
|
|
|
*
|
|
|
|
* @file file_format.hh
|
|
|
|
*/
|
|
|
|
|
|
|
|
#include "config.h"
|
|
|
|
|
2021-11-05 22:13:16 +00:00
|
|
|
#include <unordered_map>
|
|
|
|
|
2022-03-13 22:49:41 +00:00
|
|
|
#include "base/fs_util.hh"
|
2020-11-20 05:36:51 +00:00
|
|
|
#include "base/intern_string.hh"
|
2021-11-05 22:13:16 +00:00
|
|
|
#include "base/lnav_log.hh"
|
2020-11-20 05:36:51 +00:00
|
|
|
#include "auto_fd.hh"
|
|
|
|
#include "file_format.hh"
|
|
|
|
#include "archive_manager.hh"
|
|
|
|
|
2021-11-05 22:13:16 +00:00
|
|
|
static bool is_pcap_header(uint8_t *buffer)
|
|
|
|
{
|
|
|
|
size_t offset = 0;
|
|
|
|
if (buffer[0] == 0x0a &&
|
|
|
|
buffer[1] == 0x0d &&
|
|
|
|
buffer[2] == 0x0d &&
|
|
|
|
buffer[3] == 0x0a) {
|
|
|
|
offset += sizeof(uint32_t) * 2;
|
|
|
|
if (buffer[offset + 0] == 0x1a &&
|
|
|
|
buffer[offset + 1] == 0x2b &&
|
|
|
|
buffer[offset + 2] == 0x3c &&
|
|
|
|
buffer[offset + 3] == 0x4d) {
|
|
|
|
return true;
|
|
|
|
}
|
|
|
|
|
|
|
|
if (buffer[offset + 0] == 0x4d &&
|
|
|
|
buffer[offset + 1] == 0x3c &&
|
|
|
|
buffer[offset + 2] == 0x2b &&
|
|
|
|
buffer[offset + 3] == 0x1a) {
|
|
|
|
return true;
|
|
|
|
}
|
|
|
|
return false;
|
|
|
|
}
|
|
|
|
|
|
|
|
if (buffer[0] == 0xa1 &&
|
|
|
|
buffer[1] == 0xb2 &&
|
|
|
|
buffer[2] == 0xc3 &&
|
|
|
|
buffer[3] == 0xd4) {
|
|
|
|
return true;
|
|
|
|
}
|
|
|
|
|
|
|
|
if (buffer[0] == 0xd4 &&
|
|
|
|
buffer[1] == 0xc3 &&
|
|
|
|
buffer[2] == 0xb2 &&
|
|
|
|
buffer[3] == 0xa1) {
|
|
|
|
return true;
|
|
|
|
}
|
|
|
|
|
|
|
|
if (buffer[0] == 0xa1 &&
|
|
|
|
buffer[1] == 0xb2 &&
|
|
|
|
buffer[2] == 0x3c &&
|
|
|
|
buffer[3] == 0x4d) {
|
|
|
|
return true;
|
|
|
|
}
|
|
|
|
|
|
|
|
if (buffer[0] == 0x4d &&
|
|
|
|
buffer[1] == 0x3c &&
|
|
|
|
buffer[2] == 0xb2 &&
|
|
|
|
buffer[3] == 0xa1) {
|
|
|
|
return true;
|
|
|
|
}
|
|
|
|
|
|
|
|
return false;
|
|
|
|
}
|
|
|
|
|
2020-11-20 05:36:51 +00:00
|
|
|
file_format_t detect_file_format(const ghc::filesystem::path &filename)
|
|
|
|
{
|
|
|
|
if (archive_manager::is_archive(filename)) {
|
|
|
|
return file_format_t::FF_ARCHIVE;
|
|
|
|
}
|
|
|
|
|
|
|
|
file_format_t retval = file_format_t::FF_UNKNOWN;
|
|
|
|
auto_fd fd;
|
|
|
|
|
2022-03-13 22:49:41 +00:00
|
|
|
if ((fd = lnav::filesystem::openp(filename, O_RDONLY)) != -1) {
|
2021-11-05 22:13:16 +00:00
|
|
|
uint8_t buffer[32];
|
2020-11-20 05:36:51 +00:00
|
|
|
ssize_t rc;
|
|
|
|
|
|
|
|
if ((rc = read(fd, buffer, sizeof(buffer))) > 0) {
|
|
|
|
static auto SQLITE3_HEADER = "SQLite format 3";
|
|
|
|
auto header_frag = string_fragment(buffer, 0, rc);
|
|
|
|
|
|
|
|
if (header_frag.startswith(SQLITE3_HEADER)) {
|
|
|
|
retval = file_format_t::FF_SQLITE_DB;
|
2021-11-05 22:13:16 +00:00
|
|
|
} else if (rc > 24 && is_pcap_header(buffer)) {
|
|
|
|
retval = file_format_t::FF_PCAP;
|
2020-11-20 05:36:51 +00:00
|
|
|
}
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
return retval;
|
|
|
|
}
|