magika icon indicating copy to clipboard operation
magika copied to clipboard

sqlite3 files aren't detected correctly

Open ujaehrig opened this issue 1 year ago • 2 comments

Hi. Interesting project!

When I run it against one of my directories, I found it has some problems with sqlite3 files.

Simple example:

sqlite3 y.db 'create table y ( int id )' ; magika y.db ; file y.db

y.db: ISO 9660 CD-ROM filesystem data (archive)
y.db: SQLite 3.x database, last written using SQLite version 3037002, file counter 1, database pages 2, cookie 0x1, schema 4, UTF-8, version-valid-for 1

In most cases, a sqlite3 file is detected as ISO 9660, but I also had one case of RedHat Package Manager archive

ujaehrig avatar Feb 16 '24 08:02 ujaehrig

Google folks oversell this tool, in file detection this tool currently is barely useful compared to other, as trained model is puny.

diimdeep avatar Feb 16 '24 08:02 diimdeep

Thanks @ujaehrig. sqlite is not in the currently supported content types, but noting this down for v2. Thanks!

reyammer avatar Feb 19 '24 16:02 reyammer

Hi @reyammer, thank you. I had seen the document of the supported filetypes too late (maybe should be show more prominent on the page ;-) , but was surprised it's not supported yet. But thank you for the heads-up!

I'm closing the ticket for the moment.

ujaehrig avatar Feb 20 '24 07:02 ujaehrig

no worries. tagged as "to import to our KB" so that we keep this into account (see #152 for context). sqlite is indeed very relevant and should be supported. thanks for reporting!

reyammer avatar Feb 20 '24 12:02 reyammer