Hello trid users,
some days ago i run trid on more Linux kernel and many are misidentified as
"Master Boot Record dump" ( see appended output/trid-old.txt).
The file command { See
https://en.wikipedia.org/wiki/File_(command) }
described the inspected examples correctly as "Linux kernel x86 boot
executable" ( see appended output/file-5.35.txt).
So the samples should be described by dat-linux.trid.xml. So i refine that
definition file. Accidentally found fixed offset pattern vanish and only 2 parts
(0x55AAEB and HdrS) are kept, which matched info of reference URL.
Also many strings like "A20 GATE NOT RESPONDING" vanish in global string
section, especially if the kernel is only used to start other systems. This
is the case for syslinux image loader like memdisk16.bin or the PLOP boot
manager like plpbt.bin. So also another filename extension can be found for
such kernels. This is now expressed by:
<Ext>DAT/BIN</Ext>
With new trid definition all inspected kernel examples are now recognized (
see appended output/trid-new.txt). TrID definition, some examples and output
are stored in archive linux-kernel.zip. I hope that the updated XML file can
be used in future version of triddefs.
With best wishes
J?rg Jenderek
