
R-Studio Manual155
© 2002...2013 R-Tools Technology Inc.
Pattern structure
Pattern header
Each pattern starts with a standard header
<?xml version="1.0" encoding="utf-8"?>
Section template
Each pattern starts with a section giving to the pattern a name that will be shown in the parsed data pane.
Attributes:
Specifies the pattern name shown in the parsed data pane
Example:
<template name="AVI File LIST">
........
</template>
Section signature
Attributes:
Specifies if the data structure address is aligned (i.g., by a sector: 512)
This section contains elements field with hex-codes of the signature. The attribute offset specifies their
offset from the start of the record. Field length is equal to the number of hex-codes.
Example:
<signature align="1">
<field offset="0">46 49</field>
<field offset="2">4c 45</field>
</signature>
Section section
Such sections contain all expressions and operations needed for the pattern to parse the data. A section name is
shown in the parsed data pane. In fact, sections are virtual objects used to group logically connected fields.
Sections can be nested.
The main section is not shown in the parsed data pane.
Section contain elements field which are actual data objects. field names are shown in the parsed data pane
with their values.
Attributes:
Specifies the pattern name shown in the parsed data pane
Example:
<section name="JUNK">
....
</section>
List of All Objects in Patterns
Data types (in field)
integer
Sub-types:
int8
int16
Commentaires sur ces manuels