Merge pull request #2542 in SNORT/snort3 from ~KAMURTHI/snort3:posix_tar_archive...

Squashed commit of the following:

commit eceedb48a0ab5f7eeb8e6d5cde64b103dd299b74
Author: Kanimozhi Murthi <kamurthi@cisco.com>
Date:   Mon Oct 12 00:45:07 2020 -0400

    file-magic: Update POSIX tar archive pattern

diff --git a/lua/file_magic.lua b/lua/file_magic.lua
index 993c23c2f4bff21245fa0e73b6e8d5191eeda444..e67e7830fc14368cad6286340d0776b2e6df3265 100644 (file)
--- a/lua/file_magic.lua
+++ b/lua/file_magic.lua
@@ -1,7 +1,7 @@
 file_magic =
 {
     { type = 'XLW', id = 1, category = 'Office Documents', msg = 'Excel spreadsheet subheader (MS Office)', rev = 1, group = 'office', magic = { { content = '| 09 08 10 00 00 06 05 00  |', offset = 512, }, }, },
-    { type = 'POSIX_TAR', id = 2, category = 'Archive', msg = 'POSIX Tape Archive file', rev = 1, magic = { { content = '| 75 73 74 61 72 00 20 20 |', offset = 257, }, }, },
+    { type = 'POSIX_TAR', id = 2, category = 'Archive', msg = 'POSIX Tape Archive file', rev = 1, magic = { { content = '| 75 73 74 61 72 00 |', offset = 257, }, }, },
     { type = 'OLD_TAR', id = 3, category = 'Archive', msg = 'Pre-POSIX Tape Archive file', rev = 1, magic = { { content = '| 75 73 74 61 72 20 |', offset = 257, }, }, },
     { type = 'MOV', id = 4, category = 'Multimedia', msg = 'QuickTime movie file', rev = 1, group = 'video', magic = { { content = '| 66 72 65 65  |', offset = 4, }, }, },
     { type = 'MOV', id = 5, category = 'Multimedia', msg = 'QuickTime movie file', rev = 1, group = 'video', magic = { { content = '| 6D 6F 6F 76  |', offset = 4, }, }, },