#

# CDDL HEADER START

#

# The contents of this file are subject to the terms of the

# Common Development and Distribution License, Version 1.0 only

# (the "License"). You may not use this file except in compliance

# with the License.

#

# You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE

# or http://www.opensolaris.org/os/licensing.

# See the License for the specific language governing permissions

# and limitations under the License.

#

# When distributing Covered Code, include this CDDL HEADER in each

# file and include the License file at usr/src/OPENSOLARIS.LICENSE.

# If applicable, add the following below this CDDL HEADER, with the

# fields enclosed by brackets "[]" replaced with your own identifying

# information: Portions Copyright [yyyy] [name of copyright owner]

#

# CDDL HEADER END

#

#ident "%Z%%M% %I% %E% SMI" /* SVr4.0 1.4 */

# External detection table. Defines what heuristics should be run, and

# in what order.

#

# Fields are:

# OBJTYPE DEFAULT-ODI DEFAULT-MASK FUNCTION-TYPE [ARGUMENTS]

# (string) (string) (hex number) (hex number)

#

# FUNCTION TYPES are:

# 4 Internal function. argument is hex number indicating which function

# 5 Shell. Argument is a string, the name of a program.

# 6 Executable. Argument is a string, the name of a program.

# 7 Part names. No argument

# 8 Directory part names. No argument

# 9 Magic numbers. Arg is a set of pairs of numbers, 10 pairs maximum.

#

# Internal functions:

# 0 Detect Zero-length ascii file.

# 1 Detect ascii file.

# 2 Detect PC transfer object

# 3 Detect generalized transfer object (OEU)

# 4 Detect unix core file

# 5 Detect Archive file

# 6 Detect Old TeleSystem Encrypted ascii file

# 7 Detect Old TeleSystem Encrypted xed file

# 8 Detect the unknown object (always succeeds).

# 9 Detect MAIL_IN Objects.

# 10 Detect MAIL_OUT Objects.

MDIRECTORY "" 0 8

DIRECTORY "" 0 8

MENU "" 0 7

FORM "" 0 7

TEXT "" 0 7

STRUCT_1.0 "" 0 7

UCALC_1.0 "" 0 7

MAIL_OUT "" 0 4 10

MAIL_IN "" 0 4 9

ASCII "" 0 4 0

XED_5.208 "" 0 9 0 5 2047 2

EXECUTABLE TYPE=3B2/ELF 0 9 0 0177 1 0105 2 0114 3 0106 17 02

EXECUTABLE TYPE=386/ELF 0 9 0 0177 1 0105 2 0114 3 0106 16 02

EXECUTABLE TYPE=386 0 9 0 0114 1 01

EXECUTABLE TYPE=3B20 0 9 0 1 1 0150

EXECUTABLE TYPE=3B20 0 9 0 1 1 0151

EXECUTABLE TYPE=3B5/3B2 0 9 0 1 1 0160

EXECUTABLE TYPE=3B5/3B2 0 9 0 1 1 0161

EXECUTABLE TYPE=Z80 0 9 0 1 1 015

TRANSFER "" 0 4 3

ASCII "" 0 4 1

UNKNOWN TYPE=COREDUMP 4000 4 4

UNKNOWN TYPE=ARCHIVE 0 4 5

ASCII "" 200 4 6

XED_5.208 "" 200 4 7

UNKNOWN "" 0 4 8