aboutsummaryrefslogtreecommitdiffstats
path: root/wireshark-mime-package.xml
blob: 60112842046998ef50613b0c68d40664d1daf416 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
<?xml version="1.0" encoding="UTF-8"?>

<!--
    This file allows freedesktop.org-compliant desktops (such as GNOME and
    KDE) to know which files should be opened by what program (and what icon
    to show for the file in a file browser).

    Both magic and file name glob patterns are supported; glob patterns are
    preferred since they don't require require opening and reading part of
    the file to determine its type.

    The specification for this file can be found here:
    https://standards.freedesktop.org/shared-mime-info-spec/latest/


    Note that ideally the MIME types listed here should be IANA-registered:

    https://www.iana.org/assignments/media-types/media-types.xhtml

    If your file type is not registered then using one of the
    (not-really-a-good-idea and deprecated) x- media types is the only option
    if you want files to be associated with Wireshark in
    freedesktop.org-compliant file browsers.


    NOTE: if you do add a MIME type here, don't forget to add it to the list
    of MIME types handled by Wireshark in wireshark.desktop.
-->

<mime-info xmlns="http://www.freedesktop.org/standards/shared-mime-info">
  <mime-type type="application/vnd.tcpdump.pcap">
    <comment>Packet Capture (PCAP)</comment>
    <generic-icon name="application-wireshark-doc"/>
    <alias type="application/x-pcap"/>
    <alias type="application/pcap"/>
    <magic>
      <!-- standard PCAP file -->
      <match type="big32"    offset="0" value="0xa1b2c3d4"/>
      <match type="little32" offset="0" value="0xa1b2c3d4"/>
      <!-- extended (Alexey-Kuznetsov's-patches) PCAP file -->
      <match type="big32"    offset="0" value="0xa1b2cd34"/>
      <match type="little32" offset="0" value="0xa1b2cd34"/>
    </magic>
    <glob pattern="*.pcap"/>
    <glob pattern="*.pcap.gz"/>
  </mime-type>

  <mime-type type="application/x-pcapng">
    <comment>Packet Capture (PCAPNG)</comment>
    <generic-icon name="application-wireshark-doc"/>
    <magic>
      <match type="big32"      offset="0" value="0x0a0d0d0a">
	<match type="big32"    offset="8" value="0x1a2b3c4d"/>
      </match>
      <match type="little32"   offset="0" value="0x0a0d0d0a">
	<match type="little32" offset="8" value="0x1a2b3c4d"/>
      </match>
    </magic>
    <glob pattern="*.pcapng"/>
    <glob pattern="*.ntar"/>
    <glob pattern="*.pcapng.gz"/>
    <glob pattern="*.ntar.gz"/>
  </mime-type>

  <mime-type type="application/x-snoop">
    <comment>Packet Capture (Snoop)</comment>
    <generic-icon name="application-wireshark-doc"/>
    <magic>
      <match type="string" offset="0" value="snoop"/>
    </magic>
    <glob pattern="*.snoop"/>
    <glob pattern="*.snoop.gz"/>
  </mime-type>

  <mime-type type="application/x-iptrace">
    <comment>Packet Capture (AIX iptrace)</comment>
    <generic-icon name="application-wireshark-doc"/>
    <magic>
      <match type="string" offset="0" value="iptrace 1.0"/>
      <match type="string" offset="0" value="iptrace 2.0"/>
    </magic>
  </mime-type>

  <mime-type type="application/x-lanalyzer">
    <comment>Packet Capture (Novell LANalyzer)</comment>
    <generic-icon name="application-wireshark-doc"/>
    <magic>
      <match type="little16" offset="0" value="0x1001"/>
      <match type="little16" offset="0" value="0x1007"/>
    </magic>
    <glob pattern="*.tr1"/>
    <glob pattern="*.tr1.gz"/>
  </mime-type>

  <mime-type type="application/x-nettl">
    <comment>Packet Capture (HP-UX nettl)</comment>
    <generic-icon name="application-wireshark-doc"/>
    <magic>
      <match type="string" offset="0" value="\x54\x52\x00\x64\x00"/>
    </magic>
    <glob pattern="*.trc0"/>
    <glob pattern="*.trc1"/>
    <glob pattern="*.trc0.gz"/>
    <glob pattern="*.trc1.gz"/>
  </mime-type>

  <mime-type type="application/x-radcom">
    <comment>Packet Capture (Radcom WAN/LAN Analyzer)</comment>
    <generic-icon name="application-wireshark-doc"/>
    <magic>
      <match type="string" offset="0" value="\x42\xd2\x00\x34\x12\x66\x22\x88"/>
    </magic>
  </mime-type>

  <mime-type type="application/x-etherpeek">
    <comment>Packet Capture (Savvius/Etherpeek/Airopeek tagged/v9)</comment>
    <generic-icon name="application-wireshark-doc"/>
    <magic>
      <match type="string" offset="0" value="\177ver"/>
    </magic>
    <glob pattern="*.apc"/>
    <glob pattern="*.pkt"/>
    <glob pattern="*.tpc"/>
    <glob pattern="*.wpz"/>
    <glob pattern="*.apc.gz"/>
    <glob pattern="*.pkt.gz"/>
    <glob pattern="*.tpc.gz"/>
    <glob pattern="*.wpz.gz"/>
  </mime-type>

  <mime-type type="application/x-visualnetworks">
    <comment>Packet Capture (Visual Networks)</comment>
    <generic-icon name="application-wireshark-doc"/>
    <magic>
      <match type="string" offset="0" value="\x05VNF"/>
    </magic>
  </mime-type>

  <mime-type type="application/x-netinstobserver">
    <comment>Packet Capture (Network Instruments Observer)</comment>
    <generic-icon name="application-wireshark-doc"/>
    <magic>
      <match type="string" offset="0" value="ObserverPktBuffe"/>
    </magic>
    <glob pattern="*.bfr"/>
    <glob pattern="*.bfr.gz"/>
  </mime-type>

  <mime-type type="application/x-5view">
    <comment>Packet Capture (Accellent/InfoVista 5view)</comment>
    <generic-icon name="application-wireshark-doc"/>
    <magic>
      <match type="string" offset="0" value="\xaa\xaa\xaa\xaa"/>
    </magic>
    <glob pattern="*.5vw"/>
    <glob pattern="*.5vw.gz"/>
  </mime-type>

  <mime-type type="application/x-tektronix-rf5">
    <comment>Packet Capture (Tektronix rf5)</comment>
    <generic-icon name="application-wireshark-doc"/>
    <magic>
      <match type="string" offset="0" value="\x00\x00\x02\x00\x12\x05\x00\x10"/>
    </magic>
    <glob pattern="*.rf5"/>
    <glob pattern="*.rf5.gz"/>
  </mime-type>

  <mime-type type="application/x-micropross-mplog">
    <comment>Packet Capture (Micropross mplog)</comment>
    <generic-icon name="application-wireshark-doc"/>
    <magic>
      <match type="string" offset="0" value="MPCSII"/>
    </magic>
    <glob pattern="*.mplog"/>
    <glob pattern="*.mplog.gz"/>
  </mime-type>

  <mime-type type="application/x-apple-packetlogger">
    <comment>Packet Capture (macOS PacketLogger)</comment>
    <generic-icon name="application-wireshark-doc"/>
    <glob pattern="*.pklg"/>
    <glob pattern="*.pklg.gz"/>
  </mime-type>

  <mime-type type="application/x-endace-erf">
    <comment>Packet Capture (Endace ERF)</comment>
    <generic-icon name="application-wireshark-doc"/>
    <glob pattern="*.erf"/>
    <glob pattern="*.erf.gz"/>
  </mime-type>

  <mime-type type="application/ipfix">
    <comment>Packet Capture (IPFIX)</comment>
    <generic-icon name="application-wireshark-doc"/>
    <glob pattern="*.ipfix"/>
    <glob pattern="*.ipfix.gz"/>
    <!-- Don't register for .pfx: that extension has another (more common) use -->
  </mime-type>

  <mime-type type="application/x-ixia-vwr">
    <comment>Packet Capture (Ixia IxVeriWave)</comment>
    <generic-icon name="application-wireshark-doc"/>
    <glob pattern="*.vwr"/>
    <glob pattern="*.vwr.gz"/>
  </mime-type>
</mime-info>