For Programmers: Free Programming Magazines  


Home > Archive > PERL Beginners > February 2007 > A long shot









You are viewing an archived Text-only version of the thread. To view this thread in it's original format and/or if you want to reply to this thread please [click here]

 

Author A long shot
Beginner

2007-02-28, 6:59 pm

Hi All,

This is a long shot.

I have a list of files:

hash.buckets
page.index
page.wordlist
word.list
word.index
hash.file


They are part of a SQL/Apache/mod_perl installation and these are
some kind of indices for searches. I want to examine the contents if
possible.

It's quite possible that these files were made by a perl hacker but I
am unsure. Do they look like something that may have been made by a
perl module? Is this a job for pack/unpack?

Any thought appreciated.
Thanx,
Dp.

Tom Phoenix

2007-02-28, 6:59 pm

On 2/28/07, Beginner <dermot@sciencephoto.com> wrote:

> I have a list of files:
>
> hash.buckets
> page.index
> page.wordlist
> word.list
> word.index
> hash.file
>
>
> They are part of a SQL/Apache/mod_perl installation and these are
> some kind of indices for searches. I want to examine the contents if
> possible.


Have you tried the unix commands file and od?

> It's quite possible that these files were made by a perl hacker but I
> am unsure. Do they look like something that may have been made by a
> perl module?


I don't recognize these filenames, but maybe someone else does.
Guessing from the names, though, they look like files that could be
used as "some kind of indices for searches". Which is to say, if
you're worried about malicious intent, it either doesn't exist or has
been cleverly concealed. (Are any of them executable? If not, what's
the worry?)

> Is this a job for pack/unpack?


Could be, especially if you know (or can determine) the file format.
Do you have any documentation on the program that created these files,
or one that reads them? If not, I wouldn't waste too much time on
these files; reverse engineering the index's hash function could take
ws, or months. It would be faster to install a new index system
from scratch.

Good luck with it!

--Tom Phoenix
Stonehenge Perl Training
Beginner

2007-02-28, 6:59 pm

On 28 Feb 2007 at 9:58, Tom Phoenix wrote:

> On 2/28/07, Beginner <dermot@sciencephoto.com> wrote:
>
>
> Have you tried the unix commands file and od?


strings gives me some odd output, not really usable, file just says
it's data and od gives me a hex dump, again not much to work with.

>
> I don't recognize these filenames, but maybe someone else does.
> Guessing from the names, though, they look like files that could be
> used as "some kind of indices for searches". Which is to say, if
> you're worried about malicious intent, it either doesn't exist or has
> been cleverly concealed. (Are any of them executable? If not, what's
> the worry?)


The issue is that there index is corrupt or rather there is data
missing from them. Rebuilding them causes the server to crash so I
wanted to try and extract the data so I could compare it against the
database to see what was missing and add it.

>
> Could be, especially if you know (or can determine) the file format.
> Do you have any documentation on the program that created these files,
> or one that reads them? If not, I wouldn't waste too much time on
> these files; reverse engineering the index's hash function could take
> ws, or months. It would be faster to install a new index system
> from scratch.


I think your right. I was hoping that perhaps they were made with
something like pack or storable which would make the task possible.

> Good luck with it!


Thanx for your time.
Dp.


Sponsored Links







Also available: Server administration forum archive | Web Design forum archive | Software forum archive | Hardware reviews archive

Copyright 2008 codecomments.com