# Filemagic

**URL:** <https://community.zeek.org/t/filemagic/5444>\
**Category:** Zeek\
**Created:** [September 6, 2018, 12:42am UTC](https://community.zeek.org/t/filemagic/5444 "2018-09-06T00:42:39Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Carl\_Rotenan](https://avatars.discourse-cdn.com/v4/letter/c/d78d45/32.png) [@Carl\_Rotenan](https://community.zeek.org/u/Carl_Rotenan)\
**Post date:** [September 6, 2018, 12:42am UTC](https://community.zeek.org/t/filemagic/5444/1 "2018-09-06T00:42:39Z")

</div>

Hello,

Is there a way to dump all the file magic signatures and their corresponding strength in 2.5.5?

Thanks,

Carl

---

<div class="post-metadata">

**Author:** ![Jon\_Siwek](https://avatars.discourse-cdn.com/v4/letter/j/71c47a/32.png) [@Jon\_Siwek](https://community.zeek.org/u/Jon_Siwek)\
**Post date:** [September 6, 2018, 3:23pm UTC](https://community.zeek.org/t/filemagic/5444/2 "2018-09-06T15:23:54Z")

</div>

The information should all be available in the files at [1] and I'm  
only aware of this way of getting Bro to dump related debug  
information:

&nbsp;&nbsp;&nbsp;&nbsp;bro -b --debug-rules base/frameworks/files/magic

Beyond that, you may have to do your own parsing or hack something in  
to output in the format you want.

- Jon

[1] [https://github.com/bro/bro/tree/v2.5.5/scripts/base/frameworks/files/magic](https://github.com/bro/bro/tree/v2.5.5/scripts/base/frameworks/files/magic)

---

<div class="post-metadata">

**Author:** ![system](https://canada1.discourse-cdn.com/flex011/uploads/zeek/original/1X/f09d732bc2cc7c7cc7e35db67cf4e1d5233ce7a7.png) [@system](https://community.zeek.org/u/system)\
**Post date:** [May 6, 2022, 3:46pm UTC](https://community.zeek.org/t/filemagic/5444/3 "2022-05-06T15:46:02Z")

</div>