Hello trid users,
some days ago i run TrID on some splitted Debian Package variants
*.XofY.deb. These examples are only described in general by
ark-ar-archiver.trid.xml as "ar archive" ( see appended
deb_split/output/trid-old.txt).
On the other hand the newest file command {See
https://en.wikipedia.org/wiki/File_(command)} describes inspected examples
correctly like "part of multipart Debian package" ( see appended
deb_split/output/file.txt)
So i run tridscan to generate deb-split.trid.xml for such examples.
Non splitted Debian Linux Package are recognized by characteristic starting
string looking like "!.arch..debian-binary". For splitted variants this
looks like "!.arch..debian-split". This is described now by XML construct:
<Bytes>213C617263683E0A64656269616E2D62696E617279</Bytes>
<ASCII> ! . a r c h . . d e b i a n - b i n a r y</ASCII>
<Pos>0</Pos>
This is not described on Wikipedia page about Debian package format, but in
man page of deb-split utility. This is expressed by reference line:
<RefURL>
https://manpages.debian.org/testing/dpkg-dev/deb-split.5.en.html</RefURL>
With the new trid definition file now all splitted debs are described
correctly ( see appended deb/output/trid-old.txt).
and also the ipk packages are now recognized ( see appended
deb_split/output/trid-new.txt).
TrID definition, some samples and output are stored in archive deb_split. I
hope that the XML file can be used in future version of triddefs.
With best wishes
Jörg Jenderek
