Bzip2

Supported formats

Bzip2

Description

Bzip2 is a compression format popular on Unix systems and known for its high compression ratios. This backend can decompress bzip2 objects for further processing.

info

Available in Contextal Platform 1.0 and later.

Symbols

Object

• LIMITS_REACHED → limits triggered while processing the stream

Children

• TOOBIG → the stream was not extracted as it exceeds the limits

Example Metadata

{
   "org": "ctx",
   "object_id": "ef65faffc2c8067b0c9693ea71e0ee4896e89764e244aa8d3aeaedb9a57ca74e",
   "object_type": "Bzip2",
   "object_subtype": null,
   "recursion_level": 1,
   "size": 750,
   "hashes": {
      "sha256": "ef65faffc2c8067b0c9693ea71e0ee4896e89764e244aa8d3aeaedb9a57ca74e",
      "sha512": "e8c1e4df2bac5aeb31aca8ded5716fbcb2944e6630efbcd6f760c26ad5233668647e6b2f14db4e068037b15c8d4749d7b8c6eb9a734471e65a707007e1273a43",
      "md5": "9925c2e954fce25f2dc9f628d363b70d",
      "sha1": "8dd9b33b4610fe5a8a510e3f791cbde45361afc3"
   },
   "ctime": 1727281061.719758,
   "ok": {
      "symbols": [],
      "object_metadata": {
         "_backend_version": "1.0.0"
      },
      "children": [
         {
            "org": "ctx",
            "object_id": "deea6c8769e9b53cb780c0bdfefc48b3b5c9032827417e48c01afacbdd2b4c0e",
            "object_type": "Text",
            "object_subtype": null,
            "recursion_level": 2,
            "size": 1676,
            "hashes": {
               "sha256": "deea6c8769e9b53cb780c0bdfefc48b3b5c9032827417e48c01afacbdd2b4c0e",
               "sha512": "937c767b7ea18fb19b2af258e807ae668becb7be89728bb91c7bd6cc8b5636af2b192e7d58465ef4b2a2d47fd877c5d3f539c0ca4b41829dddce37b992153f0d",
               "md5": "481c4a4be1f192e276d6aa507d3da89d",
               "sha1": "a7287b494cf5b7c65ba59c382801b210b84ce8bc"
            },
            "ctime": 1727281061.719758,
            "relation_metadata": {
               "compression_factor": 2.2346666666666666,
               "input_size": 750,
               "name": "script.sh",
               "output_size": 1676
            },
            "ok": {
               "symbols": [
                  "ALL_ASCII"
               ],
               "object_metadata": {
                  "_backend_version": "1.0.0",
                  "encoding": "utf-8",
                  "number_of_ascii_range_chars": 1676,
                  "number_of_characters": 1676,
                  "number_of_digits": 25,
                  "number_of_newlines": 55,
                  "number_of_whitespaces": 378,
                  "number_of_words": 229,
                  "possible_passwords": [],
                  "programming_language": "Bash",
                  "uris": []
               },
               "children": []
            }
         }
      ]
   }
}

Example Queries

object_type == "Bzip2"
    && @has_child(object_type == "Text"
        && @match_object_meta($programming_language == "Bash")
    )

• This query matches an Bzip2 object, from which a Text object identified to contain a shell script was extracted.

Configuration Options

• max_child_input_size → maximum size of the input children object (default: 262144000)
• max_child_output_size → maximum size of the output children object (default: 262144000)