Changes between Initial Version and Version 1 of Ticket #9193, comment 10
- Timestamp:
- Apr 5, 2013, 12:17:28 PM (12 years ago)
Legend:
- Unmodified
- Added
- Removed
- Modified
-
Ticket #9193, comment 10
initial v1 2 2 > Can anyone come up with a better sniffer rule? It looks like after that first sync byte, there isn't much to analyze (s. [http://en.wikipedia.org/wiki/MPEG_transport_stream#Packet wikipedia]), or is there? 3 3 4 Our sniffer rule syntax don't support a repeat mode, otherwise a way better rule for MPEG files would be simply to check the sync 0x47 (' G') byte every 188 bytes, not just first one.4 Our sniffer rule syntax don't support a repeat mode, otherwise a way better rule for MPEG files would be simply to check the sync 0x47 ('g') byte every 188 bytes, not just first one. 5 5 6 6 While a repeat pattern could be hard to implement, what could be done quickly is to support combining patterns with & (AND), not just with | (OR) as today. … … 8 8 9 9 {{{ 10 "0.9 (' G' & [188] 'G' & [376] 'G' & [564] 'G')"10 "0.9 ('g' & [188] 'g' & [376] 'g' & [564] 'g')" 11 11 }}} 12 12