http://dlsvr01.asus.com/pub/ASUS/wireless/WL-600g/GPL_WL600g_1028A.zip

[bcm963xx.git] / targets / fs.src / etc / l7-protocols / file_types / exe.pat

diff --git a/targets/fs.src/etc/l7-protocols/file_types/exe.pat b/targets/fs.src/etc/l7-protocols/file_types/exe.pat
new file mode 100755 (executable)
index 0000000..e4d0f5b
--- /dev/null
+++ b/targets/fs.src/etc/l7-protocols/file_types/exe.pat
@@ -0,0 +1,22 @@
+# Executable - Microsoft PE file format.  
+# Pattern quality: good fast
+# Protocol groups: file
+# 
+# To discuss this pattern:
+# http://lists.sourceforge.net/lists/listinfo/l7-filter-developers
+
+# Thanks to Brandon Enright [bmenrighATucsd.edu]
+
+# This pattern doesn't techincally match the PE file format but rather the
+# MZ stub program Microsoft uses for backwards compatibility with DOS.
+# That means this will correctly match DOS executables too.
+
+exe
+# There are two different stubs used depending on the compiler/packer.
+# Numerous NULL bytes have been stripped from this pattern.
+
+# This pattern may be more efficient:
+# \x4d\x5a\x90\x03\x04|\x4d\x5a\x50\x02\x04
+
+# This is easier to understand:
+\x4d\x5a(\x90\x03|\x50\x02)\x04