1 <?xml version="1.0" encoding="UTF-8"?>
4 This file allows freedesktop.org-compliant desktops (such as GNOME and
5 KDE) to know which files should be opened by what program (and what icon
6 to show for the file in a file browser).
8 Both magic and file name glob patterns are supported; glob patterns are
9 preferred since they don't require require opening and reading part of
10 the file to determine its type.
12 The specification for this file can be found here:
13 https://standards.freedesktop.org/shared-mime-info-spec/latest/
16 Note that ideally the MIME types listed here should be IANA-registered:
18 https://www.iana.org/assignments/media-types/media-types.xhtml
20 If your file type is not registered then using one of the
21 (not-really-a-good-idea and deprecated) x- media types is the only option
22 if you want files to be associated with Wireshark in
23 freedesktop.org-compliant file browsers.
26 NOTE: if you do add a MIME type here, don't forget to add it to the list
27 of MIME types handled by Wireshark in wireshark.desktop.
30 <mime-info xmlns="http://www.freedesktop.org/standards/shared-mime-info">
31 <mime-type type="application/vnd.tcpdump.pcap">
32 <comment>Packet Capture (PCAP)</comment>
33 <generic-icon name="application-wireshark-doc"/>
34 <alias type="application/x-pcap"/>
35 <alias type="application/pcap"/>
37 <!-- standard PCAP file -->
38 <match type="big32" offset="0" value="0xa1b2c3d4"/>
39 <match type="little32" offset="0" value="0xa1b2c3d4"/>
40 <!-- extended (Alexey-Kuznetsov's-patches) PCAP file -->
41 <match type="big32" offset="0" value="0xa1b2cd34"/>
42 <match type="little32" offset="0" value="0xa1b2cd34"/>
44 <glob pattern="*.pcap"/>
45 <glob pattern="*.pcap.gz"/>
48 <mime-type type="application/x-pcapng">
49 <comment>Packet Capture (PCAPNG)</comment>
50 <generic-icon name="application-wireshark-doc"/>
52 <match type="big32" offset="0" value="0x0a0d0d0a">
53 <match type="big32" offset="8" value="0x1a2b3c4d"/>
55 <match type="little32" offset="0" value="0x0a0d0d0a">
56 <match type="little32" offset="8" value="0x1a2b3c4d"/>
59 <glob pattern="*.pcapng"/>
60 <glob pattern="*.ntar"/>
61 <glob pattern="*.pcapng.gz"/>
62 <glob pattern="*.ntar.gz"/>
65 <mime-type type="application/x-snoop">
66 <comment>Packet Capture (Snoop)</comment>
67 <generic-icon name="application-wireshark-doc"/>
69 <match type="string" offset="0" value="snoop"/>
71 <glob pattern="*.snoop"/>
72 <glob pattern="*.snoop.gz"/>
75 <mime-type type="application/x-iptrace">
76 <comment>Packet Capture (AIX iptrace)</comment>
77 <generic-icon name="application-wireshark-doc"/>
79 <match type="string" offset="0" value="iptrace 1.0"/>
80 <match type="string" offset="0" value="iptrace 2.0"/>
84 <mime-type type="application/x-lanalyzer">
85 <comment>Packet Capture (Novell LANalyzer)</comment>
86 <generic-icon name="application-wireshark-doc"/>
88 <match type="little16" offset="0" value="0x1001"/>
89 <match type="little16" offset="0" value="0x1007"/>
91 <glob pattern="*.tr1"/>
92 <glob pattern="*.tr1.gz"/>
95 <mime-type type="application/x-nettl">
96 <comment>Packet Capture (HP-UX nettl)</comment>
97 <generic-icon name="application-wireshark-doc"/>
99 <match type="string" offset="0" value="\x54\x52\x00\x64\x00"/>
101 <glob pattern="*.trc0"/>
102 <glob pattern="*.trc1"/>
103 <glob pattern="*.trc0.gz"/>
104 <glob pattern="*.trc1.gz"/>
107 <mime-type type="application/x-radcom">
108 <comment>Packet Capture (Radcom WAN/LAN Analyzer)</comment>
109 <generic-icon name="application-wireshark-doc"/>
111 <match type="string" offset="0" value="\x42\xd2\x00\x34\x12\x66\x22\x88"/>
115 <mime-type type="application/x-etherpeek">
116 <comment>Packet Capture (Savvius/Etherpeek/Airopeek tagged/v9)</comment>
117 <generic-icon name="application-wireshark-doc"/>
119 <match type="string" offset="0" value="\177ver"/>
121 <glob pattern="*.apc"/>
122 <glob pattern="*.pkt"/>
123 <glob pattern="*.tpc"/>
124 <glob pattern="*.wpz"/>
125 <glob pattern="*.apc.gz"/>
126 <glob pattern="*.pkt.gz"/>
127 <glob pattern="*.tpc.gz"/>
128 <glob pattern="*.wpz.gz"/>
131 <mime-type type="application/x-visualnetworks">
132 <comment>Packet Capture (Visual Networks)</comment>
133 <generic-icon name="application-wireshark-doc"/>
135 <match type="string" offset="0" value="\x05VNF"/>
139 <mime-type type="application/x-netinstobserver">
140 <comment>Packet Capture (Network Instruments Observer)</comment>
141 <generic-icon name="application-wireshark-doc"/>
143 <match type="string" offset="0" value="ObserverPktBuffe"/>
145 <glob pattern="*.bfr"/>
146 <glob pattern="*.bfr.gz"/>
149 <mime-type type="application/x-5view">
150 <comment>Packet Capture (Accellent/InfoVista 5view)</comment>
151 <generic-icon name="application-wireshark-doc"/>
153 <match type="string" offset="0" value="\xaa\xaa\xaa\xaa"/>
155 <glob pattern="*.5vw"/>
156 <glob pattern="*.5vw.gz"/>
159 <mime-type type="application/x-tektronix-rf5">
160 <comment>Packet Capture (Tektronix rf5)</comment>
161 <generic-icon name="application-wireshark-doc"/>
163 <match type="string" offset="0" value="\x00\x00\x02\x00\x12\x05\x00\x10"/>
165 <glob pattern="*.rf5"/>
166 <glob pattern="*.rf5.gz"/>
169 <mime-type type="application/x-micropross-mplog">
170 <comment>Packet Capture (Micropross mplog)</comment>
171 <generic-icon name="application-wireshark-doc"/>
173 <match type="string" offset="0" value="MPCSII"/>
175 <glob pattern="*.mplog"/>
176 <glob pattern="*.mplog.gz"/>
179 <mime-type type="application/x-apple-packetlogger">
180 <comment>Packet Capture (macOS PacketLogger)</comment>
181 <generic-icon name="application-wireshark-doc"/>
182 <glob pattern="*.pklg"/>
183 <glob pattern="*.pklg.gz"/>
186 <mime-type type="application/x-endace-erf">
187 <comment>Packet Capture (Endace ERF)</comment>
188 <generic-icon name="application-wireshark-doc"/>
189 <glob pattern="*.erf"/>
190 <glob pattern="*.erf.gz"/>
193 <mime-type type="application/ipfix">
194 <comment>Packet Capture (IPFIX)</comment>
195 <generic-icon name="application-wireshark-doc"/>
196 <glob pattern="*.ipfix"/>
197 <glob pattern="*.ipfix.gz"/>
198 <!-- Don't register for .pfx: that extension has another (more common) use -->
201 <mime-type type="application/x-ixia-vwr">
202 <comment>Packet Capture (Ixia IxVeriWave)</comment>
203 <generic-icon name="application-wireshark-doc"/>
204 <glob pattern="*.vwr"/>
205 <glob pattern="*.vwr.gz"/>