From: Shravan Rangarajuvenkata (shrarang) <shrarang@cisco.com>
Date: Mon, 19 Oct 2020 18:46:43 +0000 (+0000)
Subject: Merge pull request #2542 in SNORT/snort3 from ~KAMURTHI/snort3:posix_tar_archive... 
X-Git-Tag: 3.0.3-3~9
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=833b3e146bd01cf2c4377395b2ce2408e75ad632;p=thirdparty%2Fsnort3.git

Merge pull request #2542 in SNORT/snort3 from ~KAMURTHI/snort3:posix_tar_archive to master

Squashed commit of the following:

commit eceedb48a0ab5f7eeb8e6d5cde64b103dd299b74
Author: Kanimozhi Murthi <kamurthi@cisco.com>
Date:   Mon Oct 12 00:45:07 2020 -0400

    file-magic: Update POSIX tar archive pattern
---

diff --git a/lua/file_magic.lua b/lua/file_magic.lua
index 993c23c2f..e67e7830f 100644
--- a/lua/file_magic.lua
+++ b/lua/file_magic.lua
@@ -1,7 +1,7 @@
 file_magic =
 {
     { type = 'XLW', id = 1, category = 'Office Documents', msg = 'Excel spreadsheet subheader (MS Office)', rev = 1, group = 'office', magic = { { content = '| 09 08 10 00 00 06 05 00  |', offset = 512, }, }, },
-    { type = 'POSIX_TAR', id = 2, category = 'Archive', msg = 'POSIX Tape Archive file', rev = 1, magic = { { content = '| 75 73 74 61 72 00 20 20 |', offset = 257, }, }, },
+    { type = 'POSIX_TAR', id = 2, category = 'Archive', msg = 'POSIX Tape Archive file', rev = 1, magic = { { content = '| 75 73 74 61 72 00 |', offset = 257, }, }, },
     { type = 'OLD_TAR', id = 3, category = 'Archive', msg = 'Pre-POSIX Tape Archive file', rev = 1, magic = { { content = '| 75 73 74 61 72 20 |', offset = 257, }, }, },
     { type = 'MOV', id = 4, category = 'Multimedia', msg = 'QuickTime movie file', rev = 1, group = 'video', magic = { { content = '| 66 72 65 65  |', offset = 4, }, }, },
     { type = 'MOV', id = 5, category = 'Multimedia', msg = 'QuickTime movie file', rev = 1, group = 'video', magic = { { content = '| 6D 6F 6F 76  |', offset = 4, }, }, },