-
Notifications
You must be signed in to change notification settings - Fork 115
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
git-svn-id: https://svn.code.sf.net/p/ssdeep/code/tags/release-2.6@107 d1b3761f-3242-0410-b1a5-fe525d664610
- Loading branch information
jessekornblum
committed
Sep 28, 2010
1 parent
21920c1
commit 9c92207
Showing
45 changed files
with
15,596 additions
and
14,180 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -1,30 +1,36 @@ | ||
|
||
SSDEEP FILE FORMAT VERSION 1.0 | ||
SSDEEP FILE FORMAT VERSION 1.1 | ||
|
||
1. REVISION HISTORY | ||
|
||
14 Aug 2006 - Initial version (jk) | ||
|
||
15 Jul 2010 - Adding quotation marks to filenames | ||
|
||
|
||
|
||
2. FILE HEADER | ||
|
||
The first line of the file is a header, like this: | ||
|
||
ssdeep,1.0--blocksize:hash:hash,filename | ||
ssdeep,1.1--blocksize:hash:hash,filename | ||
|
||
ssdeep - Identifies the file type | ||
1.0 - The version of the file format, NOT the version of the program | ||
1.1 - The version of the file format, NOT the version of the program | ||
-- - Separator | ||
|
||
The remainder of the line identifies the format of the file. | ||
Note that for version 1.0 these values must be given EXACTLY as shown above | ||
Note that for version 1.1 these values must be given EXACTLY as shown above | ||
|
||
|
||
3. FILE DATA | ||
|
||
Each line represents the hash of one file as listed in the header. | ||
Specifically, we have the blocksize used by the program, the hash | ||
for this blocksize and twice the blocksize, and the filename. Note that | ||
there are *no* quotation marks in the file. | ||
for this blocksize and twice the blocksize, and the filename. Filenames | ||
are enclosed in quotation marks. Filenames which contain a quotation mark | ||
will have those quotes slash escaped. For example, the file ma"in.c | ||
will be listed as: | ||
|
||
"ma\"in.c" | ||
|
||
|
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Oops, something went wrong.