--- tcpxtract-1.0.1/tcpxtract.conf.orig 2005-10-06 03:11:01 +0300 +++ tcpxtract-1.0.1/tcpxtract.conf 2007-06-21 16:14:13 +0300 @@ -30,12 +30,12 @@ jpg(1000000, \xff\xd8\xff\xe1); # PNG (used in web pages) -png(1000000, \x50\x4e\x47\?, \xff\xfc\xfd\xfe); +png(1000000, \x89\x50\x4e\x47\?, \xff\xfc\xfd\xfe); # BMP (used by MSWindows, use only if you have reason to think there are # BMP files worth digging for. This often kicks back a lot of false # positives -bmp(100000, BM\?\?\x00\x00\x00); +#bmp(100000, BM\?\?\x00\x00\x00); # TIF tif(200000000, \x49\x49\x2a\x00);