You've already forked ceph-osd-file-extractor
Add binary_file_analysis
This commit is contained in:
142
binary_file_analysis
Normal file
142
binary_file_analysis
Normal file
@@ -0,0 +1,142 @@
|
||||
# data/repo/gitea-db/pg_dynshmem
|
||||
05 04 9B 00 00 00 7D 5D 0D 00 00 01 00 00 04 00 00 00
|
||||
02 02 1F 00 00 00 AA 92 0C 00 00 01 00 00 0B 00 00 00 70 67 5F 64 79 6E 73 68 6D 65 6D 1C 04 00 00 00 00 00 00
|
||||
02 02 1C 00 00 00 4A 97 0A 00 00 01 00 00 08 00 00 00 67 69 74 65 61 2D 64 62 5B 2C 00 00 00 00 00 00
|
||||
02 02 18 00 00 00 01 00 00 00 00 01 00 00 04 00 00 00 72 65 70 6F FA 3A 0A 00 00 00 00 00
|
||||
02 02 18 00 00 00 01 00 00 00 00 00 00 00 04 00 00 00 64 61 74 61 F4 97 10 00 00 00 00 00
|
||||
04 00 00 00 00 00 00 00 00 00 00 00
|
||||
|
||||
# /mnt/ceph-fs-storage/data/repo/gitea-db/pg_commit_ts
|
||||
05 04 9C 00 00 00 7C 5D 0D 00 00 01 00 00 04 00 00 00
|
||||
02 02 20 00 00 00 AA 92 0C 00 00 01 00 00 0C 00 00 00 70 67 5F 63 6F 6D 6D 69 74 5F 74 73 14 04 00 00 00 00 00 00
|
||||
02 02 1C 00 00 00 4A 97 0A 00 00 01 00 00 08 00 00 00 67 69 74 65 61 2D 64 62 5B 2C 00 00 00 00 00 00
|
||||
02 02 18 00 00 00 01 00 00 00 00 01 00 00 04 00 00 00 72 65 70 6F FA 3A 0A 00 00 00 00 00
|
||||
02 02 18 00 00 00 01 00 00 00 00 00 00 00 04 00 00 00 64 61 74 61 F4 97 10 00 00 00 00 00
|
||||
04 00 00 00 00 00 00 00 00 00 00 00
|
||||
|
||||
# /mnt/test/5.f_head/all/#5:f1988779:::10002413871.00000000:head#/attr/_parent
|
||||
# config/autohome/esphome/.esphome/platformio/packages/framework-espidf/components/wpa_supplicant/esp_supplicant/src/esp_wpa_main.c (13830 bytes = hex 36 06)
|
||||
05 04 C6 01 00 00 71 38 41 02 00 01 00 00 0C 00 00 00
|
||||
02 02 22 00 00 00 13 3A 41 02 00 01 00 00 0E 00 00 00 65 73 70 5F 77 70 61 5F 6D 61 69 6E 2E 63 45 00 00 00 00 00 00 00
|
||||
02 02 17 00 00 00 12 3A 41 02 00 01 00 00 03 00 00 00 73 72 63 92 00 00 00 00 00 00 00
|
||||
02 02 22 00 00 00 F0 39 41 02 00 01 00 00 0E 00 00 00 65 73 70 5F 73 75 70 70 6C 69 63 61 6E 74 8B 00 00 00 00 00 00 00
|
||||
02 02 22 00 00 00 55 18 41 02 00 01 00 00 0E 00 00 00 77 70 61 5F 73 75 70 70 6C 69 63 61 6E 74 F6 10 00 00 00 00 00 00
|
||||
02 02 1E 00 00 00 F7 04 41 02 00 01 00 00 0A 00 00 00 63 6F 6D 70 6F 6E 65 6E 74 73 2A 04 00 00 00 00 00 00
|
||||
02 02 24 00 00 00 D3 DE 1D 01 00 01 00 00 10 00 00 00 66 72 61 6D 65 77 6F 72 6B 2D 65 73 70 69 64 66 4C 09 00 00 00 00 00 00
|
||||
02 02 1C 00 00 00 53 B4 07 00 00 01 00 00 08 00 00 00 70 61 63 6B 61 67 65 73 AF 0E 00 00 00 00 00 00
|
||||
02 02 1E 00 00 00 52 B4 07 00 00 01 00 00 0A 00 00 00 70 6C 61 74 66 6F 72 6D 69 6F 0E 2D 00 00 00 00 00 00
|
||||
02 02 1C 00 00 00 49 C9 07 00 00 01 00 00 08 00 00 00 2E 65 73 70 68 6F 6D 65 7C 26 00 00 00 00 00 00
|
||||
02 02 1B 00 00 00 A8 8B 01 00 00 01 00 00 07 00 00 00 65 73 70 68 6F 6D 65 C0 DB 07 00 00 00 00 00
|
||||
02 02 1C 00 00 00 00 00 00 00 00 01 00 00 08 00 00 00 61 75 74 6F 68 6F 6D 65 8E D6 70 00 00 00 00 00
|
||||
02 02 1A 00 00 00 01 00 00 00 00 00 00 00 06 00 00 00 63 6F 6E 66 69 67 60 AE D9 03 00 00 00 00
|
||||
05 00 00 00 00 00 00 00 00 00 00 00
|
||||
|
||||
# /mnt/test/5.f_head/all/#5:f1988779:::10002413871.00000000:head#/attr/_
|
||||
# config/autohome/esphome/.esphome/platformio/packages/framework-espidf/components/wpa_supplicant/esp_supplicant/src/esp_wpa_main.c (13830 bytes = hex 36 06)
|
||||
11 08 0D 01 00 00 04 03 35 00 00 00 00 00 00 00 14 00 00 00
|
||||
31 30 30 30 32 34 31 33 38 37 31 2E 30 30 30 30 30 30 30 30 = 10002413871.00000000 - this is the name of the placement group folder
|
||||
FE FF FF FF FF FF FF FF 8F 19 E1 9E 00 00 00 00 00 05 00 00 00 00 00 00 00
|
||||
06 03 1C 00 00 00 05 00 00 00 00 00 00 00 FF FF FF FF 00 00 00 00 00 00 00 00 FF FF FF FF FF FF FF FF 00 00 00 00 4F 4A 2D 00 00 00 00 00 9A 04 00 00 03 D4 2C 00 00 00 00 00 92 04 00 00
|
||||
02 02 15 00 00 00 04 01 00 00 00 00 00 00 00 58 1B F0 00 00 00 00 00 00 00 00 00 06 36 00 00 00 00 00 00 07 87 65 67 FD EE D7 28
|
||||
02 02 15 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 D4 2C 00 00 00 00 00 00 00 00 00 00 00 00 00 00 34 00 00 00 08 87 65 67 47 17 F6 02 DB 08 B4 0F FF FF FF FF 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
|
||||
|
||||
# ####################################################################################################
|
||||
# ####################################################################################################
|
||||
|
||||
# /mnt/test/5.64_head/all/#5:279c45db:::10000032979.00000000:head#/attr/_parent
|
||||
# data/finance/ofx-converter/tangerine/SAVINGS/DataImporter_20220219060001.log.err
|
||||
05 04 FF 00 00 00 79 29 03 00 00 01 00 00 06 00 00 00
|
||||
02 02 37 00 00 00 B0 21 03 00 00 01 00 00 23 00 00 00 44 61 74 61 49 6D 70 6F 72 74 65 72 5F 32 30 32 32 30 32 31 39 30 36 30 30 30 31 2E 6C 6F 67 2E 65 72 72 6C 22 00 00 00 00 00 00
|
||||
02 02 1B 00 00 00 A3 21 03 00 00 01 00 00 07 00 00 00 53 41 56 49 4E 47 53 92 8F 00 00 00 00 00 00
|
||||
02 02 1D 00 00 00 A2 21 03 00 00 01 00 00 09 00 00 00 74 61 6E 67 65 72 69 6E 65 08 01 00 00 00 00 00 00
|
||||
02 02 21 00 00 00 A1 21 03 00 00 01 00 00 0D 00 00 00 6F 66 78 2D 63 6F 6E 76 65 72 74 65 72 40 02 00 00 00 00 00 00
|
||||
02 02 1B 00 00 00 01 00 00 00 00 01 00 00 07 00 00 00 66 69 6E 61 6E 63 65 17 34 00 00 00 00 00 00
|
||||
02 02 18 00 00 00 01 00 00 00 00 00 00 00 04 00 00 00 64 61 74 61 1A 34 00 00 00 00 00 00
|
||||
05 00 00 00 00 00 00 00 00 00 00 00
|
||||
|
||||
# /mnt/test/5.64_head/all/#5:279c45db:::10000032979.00000000:head#/attr/_
|
||||
# data/finance/ofx-converter/tangerine/SAVINGS/DataImporter_20220219060001.log.err
|
||||
11 08 0D 01 00 00 04 03 35 00 00 00 00 00 00 00 14 00 00 00
|
||||
31 30 30 30 30 30 33 32 39 37 39 2E 30 30 30 30 30 30 30 30 = 10000032979.00000000 - this is the name of the placement group folder
|
||||
FE FF FF FF FF FF FF FF E4 39 A2 DB 00 00 00 00 00 05 00 00 00 00 00 00 00
|
||||
06 03 1C 00 00 00 05 00 00 00 00 00 00 00 FF FF FF FF 00 00 00 00 00 00 00 00 FF FF FF FF FF FF FF FF 00 00 00 00 13 74 00 00 00 00 00 00 64 00 00 00 B2 0D 00 00 00 00 00 00 37 00 00 00
|
||||
02 02 15 00 00 00 04 01 00 00 00 00 00 00 00 8E 17 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 E0 E2 D3 65 4B 64 D8 0B
|
||||
02 02 15 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 B2 0D 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 34 00 00 00 E0 E2 D3 65 5C 51 0F 0C FF FF FF FF FF FF FF FF 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
|
||||
|
||||
# ####################################################################################################
|
||||
# ####################################################################################################
|
||||
|
||||
# /mnt/test/5.64_head/all/#5:27bf9e67:::100022546e1.00000000:head#/attr/_parent
|
||||
# data/ci-cd/jenkins/jobs/secmayl/jobs/mdns/branches/main/builds/334/changelog5776289455726473524.xml (0 bytes?)
|
||||
05 04 A8 01 00 00 E1 46 25 02 00 01 00 00 0C 00 00 00
|
||||
02 02 34 00 00 00 B3 35 25 02 00 01 00 00 20 00 00 00 63 68 61 6E 67 65 6C 6F 67 35 37 37 36 32 38 39 34 35 35 37 32 36 34 37 33 35 32 34 2E 78 6D 6C D5 09 00 00 00 00 00 00
|
||||
02 02 17 00 00 00 8E 08 03 00 00 01 00 00 03 00 00 00 33 33 34 57 1B 04 00 00 00 00 00
|
||||
02 02 1A 00 00 00 8C 08 03 00 00 01 00 00 06 00 00 00 62 75 69 6C 64 73 99 C2 00 00 00 00 00 00
|
||||
02 02 18 00 00 00 8B 08 03 00 00 01 00 00 04 00 00 00 6D 61 69 6E 6A B0 00 00 00 00 00 00
|
||||
02 02 1C 00 00 00 87 08 03 00 00 01 00 00 08 00 00 00 62 72 61 6E 63 68 65 73 BF 97 00 00 00 00 00 00
|
||||
02 02 18 00 00 00 A1 C9 02 00 00 01 00 00 04 00 00 00 6D 64 6E 73 28 66 17 00 00 00 00 00
|
||||
02 02 18 00 00 00 A0 C9 02 00 00 01 00 00 04 00 00 00 6A 6F 62 73 68 6D 08 00 00 00 00 00
|
||||
02 02 1B 00 00 00 9F C9 02 00 00 01 00 00 07 00 00 00 73 65 63 6D 61 79 6C A8 A6 07 00 00 00 00 00
|
||||
02 02 18 00 00 00 79 BC 02 00 00 01 00 00 04 00 00 00 6A 6F 62 73 AB 60 2C 00 00 00 00 00
|
||||
02 02 1B 00 00 00 78 BC 02 00 00 01 00 00 07 00 00 00 6A 65 6E 6B 69 6E 73 D7 40 2A 00 00 00 00 00
|
||||
02 02 19 00 00 00 01 00 00 00 00 01 00 00 05 00 00 00 63 69 2D 63 64 6C 8C 29 04 00 00 00 00
|
||||
02 02 18 00 00 00 01 00 00 00 00 00 00 00 04 00 00 00 64 61 74 61 84 95 B4 03 00 00 00 00
|
||||
05 00 00 00 00 00 00 00 00 00 00 00
|
||||
|
||||
# /mnt/test/5.64_head/all/#5:27bf9e67:::100022546e1.00000000:head#/attr/_
|
||||
# data/ci-cd/jenkins/jobs/secmayl/jobs/mdns/branches/main/builds/334/changelog5776289455726473524.xml (0 bytes?)
|
||||
11 08 0D 01 00 00 04 03 35 00 00 00 00 00 00 00 14 00 00 00
|
||||
31 30 30 30 32 32 35 34 36 65 31 2E 30 30 30 30 30 30 30 30 = 100022546e1.00000000 - this is the name of the placement group folder
|
||||
FE FF FF FF FF FF FF FF E4 FD 79 E6 00 00 00 00 00 05 00 00 00 00 00 00 00
|
||||
06 03 1C 00 00 00 05 00 00 00 00 00 00 00 FF FF FF FF 00 00 00 00 00 00 00 00 FF FF FF FF FF FF FF FF 00 00 00 00 9F 0E 38 00 00 00 00 00 4F 04 00 00 63 1D 37 00 00 00 00 00 34 04 00 00
|
||||
02 02 15 00 00 00 04 01 00 00 00 00 00 00 00 6C 78 96 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 9E 80 55 67 28 09 3B 2D
|
||||
02 02 15 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 63 1D 37 00 00 00 00 00 00 00 00 00 00 00 00 00 00 34 00 00 00 9E 80 55 67 63 67 45 2D FF FF FF FF FF FF FF FF 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
|
||||
|
||||
# ####################################################################################################
|
||||
# ####################################################################################################
|
||||
|
||||
# looks like the placement group folder name has some structure to it:
|
||||
|
||||
5.7f_head = placement group name(?)
|
||||
all = this contains all bitwise objects(?)
|
||||
#5:fea38466:::100028f0fe1.00000000:head = see below
|
||||
#5 = this is part of the #5 placement group(?)
|
||||
fea38466 = this is the bitwise hash of the data in this specific folder(?) (could be a file partial)
|
||||
100028f0fe1 = this is a reference to the specific WHOLE file(?)
|
||||
00000000 = this appears to be an indicator of the chunk of the file(?) increases
|
||||
|
||||
# for large files, there are chunked data files
|
||||
/mnt/test/5.7f_head/all/#5:fea38466:::100028f0fe1.00000000:head#/data - 4194304 bytes - this one has the attr/parent file
|
||||
/mnt/test/5.10_head/all/#5:09bae575:::100028f0fe1.00000001:head#/data - 4194304 bytes - these have only data files
|
||||
/mnt/test/5.5a_head/all/#5:5a091d7f:::100028f0fe1.00000002:head#/data - 4194304 bytes
|
||||
/mnt/test/5.6f_head/all/#5:f63387fb:::100028f0fe1.00000003:head#/data - 4194304 bytes
|
||||
/mnt/test/5.7c_head/all/#5:3f938613:::100028f0fe1.00000004:head#/data - 4194304 bytes
|
||||
/mnt/test/5.15_head/all/#5:a82d637c:::100028f0fe1.00000005:head#/data - 4194304 bytes
|
||||
/mnt/test/5.1e_head/all/#5:79f68ed6:::100028f0fe1.00000006:head#/data - 4194304 bytes
|
||||
/mnt/test/5.10_head/all/#5:08ac83db:::100028f0fe1.00000007:head#/data - 4194304 bytes
|
||||
/mnt/test/5.42_head/all/#5:4208d4bc:::100028f0fe1.00000008:head#/data - 4194304 bytes
|
||||
/mnt/test/5.65_head/all/#5:a7d973e6:::100028f0fe1.00000009:head#/data - 4194304 bytes
|
||||
/mnt/test/5.1a_head/all/#5:591fea12:::100028f0fe1.0000000a:head#/data - 4194304 bytes
|
||||
/mnt/test/5.27_head/all/#5:e552bdc4:::100028f0fe1.0000000b:head#/data - 4194304 bytes
|
||||
/mnt/test/5.64_head/all/#5:269be025:::100028f0fe1.0000000c:head#/data - 1871872 bytes
|
||||
52203520 bytes (total) = 03 1C 90 00
|
||||
|
||||
|
||||
# /mnt/test/5.7f_head/all/#5:fea38466:::100028f0fe1.00000000:head#/attr/_parent
|
||||
# config/autohome/hass/backups/310cb0b2.tar (> 52203520 bytes)
|
||||
05 04 BF 00 00 00 E1 0F 8F 02 00 01 00 00 05 00 00 00
|
||||
02 02 20 00 00 00 2D 2F 28 01 00 01 00 00 0C 00 00 00 33 31 30 63 62 30 62 32 2E 74 61 72 DD 0C 00 00 00 00 00 00
|
||||
02 02 1B 00 00 00 3D 9A 01 00 00 01 00 00 07 00 00 00 62 61 63 6B 75 70 73 39 C1 10 00 00 00 00 00
|
||||
02 02 18 00 00 00 A8 8B 01 00 00 01 00 00 04 00 00 00 68 61 73 73 98 EB 08 00 00 00 00 00
|
||||
02 02 1C 00 00 00 00 00 00 00 00 01 00 00 08 00 00 00 61 75 74 6F 68 6F 6D 65 22 0E 78 00 00 00 00 00
|
||||
02 02 1A 00 00 00 01 00 00 00 00 00 00 00 06 00 00 00 63 6F 6E 66 69 67 6F E3 52 04 00 00 00 00
|
||||
05 00 00 00 00 00 00 00 00 00 00 00
|
||||
|
||||
# /mnt/test/5.7f_head/all/#5:fea38466:::100028f0fe1.00000000:head#/attr/_
|
||||
# config/autohome/hass/backups/310cb0b2.tar (> 4194304 bytes)
|
||||
11 08 0D 01 00 00 04 03 35 00 00 00 00 00 00 00 14 00 00 00
|
||||
31 30 30 30 32 38 66 30 66 65 31 2E 30 30 30 30 30 30 30 30 = 100028f0fe1.00000000 - this is the name of the placement group folder
|
||||
FE FF FF FF FF FF FF FF 7F C5 21 66 00 00 00 00 00 05 00 00 00 00 00 00 00 |<---------------->| size of this chunk's file (in reverse)
|
||||
06 03 1C 00 00 00 05 00 00 00 00 00 00 00 FF FF FF FF 00 00 00 00 00 00 00 00 FF FF FF FF FF FF FF FF 00 00 00 00 61 88 37 00 00 00 00 00 CC 05 00 00 E7 86 37 00 00 00 00 00 CC 05 00 00
|
||||
02 02 15 00 00 00 02 00 00 00 00 00 00 00 00 18 73 5F 02 00 00 00 00 A4 36 09 00 00 00 40 00 00 00 00 00 97 AF 98 67 D1 6B A8 28
|
||||
02 02 15 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 61 88 37 00 00 00 00 00 00 00 00 00 00 00 00 00 00 14 00 00 00 97 AF 98 67 F3 ED C2 28 1F 3D 80 92 FF FF FF FF 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
|
||||
Reference in New Issue
Block a user