when the pic type is JPEG ,tnef can not prase winmail.dat successful,Actually,we get a file that name is "Untitled Attachment",and the size of the file is bigger .
I see the same behavior as reported. The verobse/debug output shows that TNEF is not finding a name of the file other than 'Untitled Attachment' (this is not invented by TNEF - it is in the winmail.dat file itself).
If it is possible to get the jpeg that is embedded in the winmail.dat it could be beneficial to my debugging.
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
Looking at the unpacked attachment in a hex editor - it does not appear to be a JPEG file. Quoting wikipedia:
JPEG image files begin with FF D8 and end with FF D9. JPEG/JFIF files contain the ASCII code for "JFIF" (4A 46 49 46) as a null terminated string. JPEG/Exif files contain the ASCII code for "Exif" (45 78 69 66) also as a null terminated string, followed by more metadata about the file.
I see none of that evidence.
Furthermore there is other evidence that it is not a JPEG in that it contains words such as: "CONTENTS", "Root Entry", "MailStream" - plus a chunk of the ASCII table replicated.
Please explain why you believe this to be a JPEG file and how it was attached.
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
I see the same behavior as reported. The verobse/debug output shows that TNEF is not finding a name of the file other than 'Untitled Attachment' (this is not invented by TNEF - it is in the winmail.dat file itself).
If it is possible to get the jpeg that is embedded in the winmail.dat it could be beneficial to my debugging.
Looking at the unpacked attachment in a hex editor - it does not appear to be a JPEG file. Quoting wikipedia:
JPEG image files begin with FF D8 and end with FF D9. JPEG/JFIF files contain the ASCII code for "JFIF" (4A 46 49 46) as a null terminated string. JPEG/Exif files contain the ASCII code for "Exif" (45 78 69 66) also as a null terminated string, followed by more metadata about the file.
I see none of that evidence.
Furthermore there is other evidence that it is not a JPEG in that it contains words such as: "CONTENTS", "Root Entry", "MailStream" - plus a chunk of the ASCII table replicated.
Please explain why you believe this to be a JPEG file and how it was attached.
im sorry about that, verdammelt is right! i find it contains a BMP image file and other words just like verdammelt said. Thanks a lot!
i get a bmp file by hex editor,thanks.