View Issue Details

IDProjectCategoryView StatusLast Update
0000703fileGeneralpublic2025-12-20 15:04
ReporterRolandK Assigned To 
PrioritynormalSeverityfeatureReproducibilityN/A
Status newResolutionopen 
Product Version5.46 
Summary0000703: Please Add Proxmox File Types/Magic
DescriptionHello, hereby i'd like to submit file types used by Proxmox Backup Server Product, as discussed at https://bugzilla.proxmox.com/show_bug.cgi?id=7151

would someone be so kind to review/integrate ?

thank you !

Roland / devZer0
Proxmox Enthusiast & Sysadmin from Cologne/Germany


 0 byte 66 Proxmox Backup Server unencrypted uncompressed blob
>1 byte 171
>2 byte 56
>3 byte 7
>4 byte 190
>5 byte 131
>6 byte 112
>7 byte 161

0 byte 49 Proxmox Backup Server unencrypted compressed blob
>1 byte 185
>2 byte 88
>3 byte 66
>4 byte 111
>5 byte 182
>6 byte 163
>7 byte 127

0 byte 123 Proxmox Backup Server encrypted uncompressed blob
>1 byte 103
>2 byte 133
>3 byte 190
>4 byte 34
>5 byte 45
>6 byte 76
>7 byte 240

0 byte 230 Proxmox Backup Server encrypted compressed blob
>1 byte 89
>2 byte 27
>3 byte 191
>4 byte 11
>5 byte 191
>6 byte 216
>7 byte 11

0 byte 47 Proxmox Backup Server fixed index
>1 byte 127
>2 byte 65
>3 byte 237
>4 byte 145
>5 byte 253
>6 byte 15
>7 byte 205

0 byte 28 Proxmox Backup Server dynamic index
>1 byte 145
>2 byte 78
>3 byte 165
>4 byte 25
>5 byte 186
>6 byte 179
>7 byte 205

0 byte 239 Proxmox File Archive Format v1 / pxar
>1 byte 172
>2 byte 136
>3 byte 229
>4 byte 116
>5 byte 100
>6 byte 149
>7 byte 213

0 byte 13 Proxmox File Archive Format v2+ / mpxar
>1 byte 164
>2 byte 22
>3 byte 223
>4 byte 117
>5 byte 108
>6 byte 15
>7 byte 115
>8 byte 24
>9 byte 0
>10 byte 0
>11 byte 0
>12 byte 0
>13 byte 0
>14 byte 0
>15 byte 0
>16 byte 2

0 byte 210 Proxmox File Archive Format payload stream / ppxar
>1 byte 78
>2 byte 74
>3 byte 25
>4 byte 194
>5 byte 104
>6 byte 76
>7 byte 131
>8 byte 16
TagsNo tags attached.

Activities

jsummers

2025-12-20 13:34

reporter   ~0004323

I'm not familiar with these formats, but I can see that the patterns don't (really) work. Too many false positives. None of the lines starting with ">" do anything.

For example, for the first pattern, I think what you're trying to do is this:

0 byte 66
>1 byte 171
>>2 byte 56
>>>3 byte 7
>>>>4 byte 190
>>>>>5 byte 131
>>>>>>6 byte 112
>>>>>>>7 byte 161 Proxmox Backup Server unencrypted uncompressed blob

Or you could do the same thing in one line:

0 string \x42\xab\x38\x07\xbe\x83\x70\xa1 Proxmox Backup Server unencrypted uncompressed blob

If you're able to run Python scripts, I humbly suggest that my Mgchkj utility can be helpful when writing new patterns. https://github.com/jsummers/mgchkj

RolandK

2025-12-20 15:04

reporter   ~0004324

damn, indeed you are right , don't know anymore where i did get that syntax example from, maybe AI search was playing a prank on me and testing was just sucessful, because all files start with an inividual/different bytecode

will send a fixed version.

Issue History

Date Modified Username Field Change
2025-12-18 23:05 RolandK New Issue
2025-12-20 13:34 jsummers Note Added: 0004323
2025-12-20 15:04 RolandK Note Added: 0004324