aboutsummaryrefslogtreecommitdiffstats
path: root/wireshark-mime-package.xml
blob: 01f1c78f99ce1e52bd35c343294cfdd77fedadd8 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
<?xml version="1.0" encoding="UTF-8"?>

<mime-info xmlns="http://www.freedesktop.org/standards/shared-mime-info">
  <mime-type type="application/vnd.tcpdump.pcap">
    <comment>Packet Capture (PCAP)</comment>
    <generic-icon name="application-wireshark-doc"/>
    <alias type="application/x-pcap"/>
    <alias type="application/pcap"/>
    <magic>
      <!-- standard PCAP file -->
      <match type="big32"    offset="0" value="0xa1b2c3d4"/>
      <match type="little32" offset="0" value="0xa1b2c3d4"/>
      <!-- extended (Alexey-Kuznetsov's-patches) PCAP file -->
      <match type="big32"    offset="0" value="0xa1b2cd34"/>
      <match type="little32" offset="0" value="0xa1b2cd34"/>
    </magic>
    <glob pattern="*.pcap"/>
    <glob pattern="*.pcap.gz"/>
  </mime-type>

  <mime-type type="application/x-pcapng">
    <comment>Packet Capture (PCAPNG)</comment>
    <generic-icon name="application-wireshark-doc"/>
    <magic>
      <match type="big32"      offset="0" value="0x0a0d0d0a">
	<match type="big32"    offset="8" value="0x1a2b3c4d"/>
      </match>
      <match type="little32"   offset="0" value="0x0a0d0d0a">
	<match type="little32" offset="8" value="0x1a2b3c4d"/>
      </match>
    </magic>
    <glob pattern="*.pcapng"/>
    <glob pattern="*.ntar"/>
    <glob pattern="*.pcapng.gz"/>
    <glob pattern="*.ntar.gz"/>
  </mime-type>

  <mime-type type="application/x-snoop">
    <comment>Packet Capture (Snoop)</comment>
    <generic-icon name="application-wireshark-doc"/>
    <magic>
      <match type="string" offset="0" value="snoop"/>
    </magic>
    <glob pattern="*.snoop"/>
    <glob pattern="*.snoop.gz"/>
  </mime-type>

  <mime-type type="application/x-iptrace">
    <comment>Packet Capture (AIX iptrace)</comment>
    <generic-icon name="application-wireshark-doc"/>
    <magic>
      <match type="string" offset="0" value="iptrace 1.0"/>
      <match type="string" offset="0" value="iptrace 2.0"/>
    </magic>
  </mime-type>

  <mime-type type="application/x-lanalyzer">
    <comment>Packet Capture (Novell LANalyzer)</comment>
    <generic-icon name="application-wireshark-doc"/>
    <magic>
      <match type="little16" offset="0" value="0x1001"/>
      <match type="little16" offset="0" value="0x1007"/>
    </magic>
    <glob pattern="*.tr1"/>
    <glob pattern="*.tr1.gz"/>
  </mime-type>

  <mime-type type="application/x-nettl">
    <comment>Packet Capture (HP-UX nettl)</comment>
    <generic-icon name="application-wireshark-doc"/>
    <magic>
      <match type="string" offset="0" value="\x54\x52\x00\x64\x00"/>
    </magic>
    <glob pattern="*.trc0"/>
    <glob pattern="*.trc1"/>
    <glob pattern="*.trc0.gz"/>
    <glob pattern="*.trc1.gz"/>
  </mime-type>

  <mime-type type="application/x-radcom">
    <comment>Packet Capture (Radcom WAN/LAN Analyzer)</comment>
    <generic-icon name="application-wireshark-doc"/>
    <magic>
      <match type="string" offset="0" value="\x42\xd2\x00\x34\x12\x66\x22\x88"/>
    </magic>
  </mime-type>

  <mime-type type="application/x-etherpeek">
    <comment>Packet Capture (Savvius/Etherpeek/Airopeek tagged/v9)</comment>
    <generic-icon name="application-wireshark-doc"/>
    <magic>
      <match type="string" offset="0" value="\177ver"/>
    </magic>
    <glob pattern="*.tpc"/>
    <glob pattern="*.apc"/>
    <glob pattern="*.wpz"/>
    <glob pattern="*.tpc.gz"/>
    <glob pattern="*.apc.gz"/>
    <glob pattern="*.wpz.gz"/>
  </mime-type>

  <mime-type type="application/x-visualnetworks">
    <comment>Packet Capture (Visual Networks)</comment>
    <generic-icon name="application-wireshark-doc"/>
    <magic>
      <match type="string" offset="0" value="\x05VNF"/>
    </magic>
  </mime-type>

  <mime-type type="application/x-netinstobserver">
    <comment>Packet Capture (Network Instruments Observer)</comment>
    <generic-icon name="application-wireshark-doc"/>
    <magic>
      <match type="string" offset="0" value="ObserverPktBuffe"/>
    </magic>
    <glob pattern="*.bfr"/>
    <glob pattern="*.bfr.gz"/>
  </mime-type>

  <mime-type type="application/x-5view">
    <comment>Packet Capture (Accellent/InfoVista 5view)</comment>
    <generic-icon name="application-wireshark-doc"/>
    <magic>
      <match type="string" offset="0" value="\xaa\xaa\xaa\xaa"/>
    </magic>
    <glob pattern="*.5vw"/>
    <glob pattern="*.5vw.gz"/>
  </mime-type>

  <mime-type type="application/x-tektronix-rf5">
    <comment>Packet Capture (Tektronix rf5)</comment>
    <generic-icon name="application-wireshark-doc"/>
    <magic>
      <match type="string" offset="0" value="\x00\x00\x02\x00\x12\x05\x00\x10"/>
    </magic>
    <glob pattern="*.rf5"/>
    <glob pattern="*.rf5.gz"/>
  </mime-type>
</mime-info>