wireshark-mime-package.xml

   1 <?xml version="1.0" encoding="UTF-8"?>
   2
   3 <!--
   4     This file allows freedesktop.org-compliant desktops (such as GNOME and
   5     KDE) to know which files should be opened by what program (and what icon
   6     to show for the file in a file browser).
   7
   8     Both magic and file name glob patterns are supported; glob patterns are
   9     preferred since they don't require require opening and reading part of
  10     the file to determine its type.
  11
  12     The specification for this file can be found here:
  13     https://standards.freedesktop.org/shared-mime-info-spec/latest/
  14
  15
  16     Note that ideally the MIME types listed here should be IANA-registered:
  17
  18     https://www.iana.org/assignments/media-types/media-types.xhtml
  19
  20     If your file type is not registered then using one of the
  21     (not-really-a-good-idea and deprecated) x- media types is the only option
  22     if you want files to be associated with Wireshark in
  23     freedesktop.org-compliant file browsers.
  24
  25
  26     NOTE: if you do add a MIME type here, don't forget to add it to the list
  27     of MIME types handled by Wireshark in wireshark.desktop.
  28 -->
  29
  30 <mime-info xmlns="http://www.freedesktop.org/standards/shared-mime-info">
  31   <mime-type type="application/vnd.tcpdump.pcap">
  32     <comment>Packet Capture (PCAP)</comment>
  33     <generic-icon name="application-wireshark-doc"/>
  34     <alias type="application/x-pcap"/>
  35     <alias type="application/pcap"/>
  36     <magic>
  37       <!-- standard PCAP file -->
  38       <match type="big32"    offset="0" value="0xa1b2c3d4"/>
  39       <match type="little32" offset="0" value="0xa1b2c3d4"/>
  40       <!-- extended (Alexey-Kuznetsov's-patches) PCAP file -->
  41       <match type="big32"    offset="0" value="0xa1b2cd34"/>
  42       <match type="little32" offset="0" value="0xa1b2cd34"/>
  43     </magic>
  44     <glob pattern="*.pcap"/>
  45     <glob pattern="*.pcap.gz"/>
  46   </mime-type>
  47
  48   <mime-type type="application/x-pcapng">
  49     <comment>Packet Capture (PCAPNG)</comment>
  50     <generic-icon name="application-wireshark-doc"/>
  51     <magic>
  52       <match type="big32"      offset="0" value="0x0a0d0d0a">
  53         <match type="big32"    offset="8" value="0x1a2b3c4d"/>
  54       </match>
  55       <match type="little32"   offset="0" value="0x0a0d0d0a">
  56         <match type="little32" offset="8" value="0x1a2b3c4d"/>
  57       </match>
  58     </magic>
  59     <glob pattern="*.pcapng"/>
  60     <glob pattern="*.ntar"/>
  61     <glob pattern="*.pcapng.gz"/>
  62     <glob pattern="*.ntar.gz"/>
  63   </mime-type>
  64
  65   <mime-type type="application/x-snoop">
  66     <comment>Packet Capture (Snoop)</comment>
  67     <generic-icon name="application-wireshark-doc"/>
  68     <magic>
  69       <match type="string" offset="0" value="snoop"/>
  70     </magic>
  71     <glob pattern="*.snoop"/>
  72     <glob pattern="*.snoop.gz"/>
  73   </mime-type>
  74
  75   <mime-type type="application/x-iptrace">
  76     <comment>Packet Capture (AIX iptrace)</comment>
  77     <generic-icon name="application-wireshark-doc"/>
  78     <magic>
  79       <match type="string" offset="0" value="iptrace 1.0"/>
  80       <match type="string" offset="0" value="iptrace 2.0"/>
  81     </magic>
  82   </mime-type>
  83
  84   <mime-type type="application/x-lanalyzer">
  85     <comment>Packet Capture (Novell LANalyzer)</comment>
  86     <generic-icon name="application-wireshark-doc"/>
  87     <magic>
  88       <match type="little16" offset="0" value="0x1001"/>
  89       <match type="little16" offset="0" value="0x1007"/>
  90     </magic>
  91     <glob pattern="*.tr1"/>
  92     <glob pattern="*.tr1.gz"/>
  93   </mime-type>
  94
  95   <mime-type type="application/x-nettl">
  96     <comment>Packet Capture (HP-UX nettl)</comment>
  97     <generic-icon name="application-wireshark-doc"/>
  98     <magic>
  99       <match type="string" offset="0" value="\x54\x52\x00\x64\x00"/>
 100     </magic>
 101     <glob pattern="*.trc0"/>
 102     <glob pattern="*.trc1"/>
 103     <glob pattern="*.trc0.gz"/>
 104     <glob pattern="*.trc1.gz"/>
 105   </mime-type>
 106
 107   <mime-type type="application/x-radcom">
 108     <comment>Packet Capture (Radcom WAN/LAN Analyzer)</comment>
 109     <generic-icon name="application-wireshark-doc"/>
 110     <magic>
 111       <match type="string" offset="0" value="\x42\xd2\x00\x34\x12\x66\x22\x88"/>
 112     </magic>
 113   </mime-type>
 114
 115   <mime-type type="application/x-etherpeek">
 116     <comment>Packet Capture (Savvius/Etherpeek/Airopeek tagged/v9)</comment>
 117     <generic-icon name="application-wireshark-doc"/>
 118     <magic>
 119       <match type="string" offset="0" value="\177ver"/>
 120     </magic>
 121     <glob pattern="*.apc"/>
 122     <glob pattern="*.pkt"/>
 123     <glob pattern="*.tpc"/>
 124     <glob pattern="*.wpz"/>
 125     <glob pattern="*.apc.gz"/>
 126     <glob pattern="*.pkt.gz"/>
 127     <glob pattern="*.tpc.gz"/>
 128     <glob pattern="*.wpz.gz"/>
 129   </mime-type>
 130
 131   <mime-type type="application/x-visualnetworks">
 132     <comment>Packet Capture (Visual Networks)</comment>
 133     <generic-icon name="application-wireshark-doc"/>
 134     <magic>
 135       <match type="string" offset="0" value="\x05VNF"/>
 136     </magic>
 137   </mime-type>
 138
 139   <mime-type type="application/x-netinstobserver">
 140     <comment>Packet Capture (Network Instruments Observer)</comment>
 141     <generic-icon name="application-wireshark-doc"/>
 142     <magic>
 143       <match type="string" offset="0" value="ObserverPktBuffe"/>
 144     </magic>
 145     <glob pattern="*.bfr"/>
 146     <glob pattern="*.bfr.gz"/>
 147   </mime-type>
 148
 149   <mime-type type="application/x-5view">
 150     <comment>Packet Capture (Accellent/InfoVista 5view)</comment>
 151     <generic-icon name="application-wireshark-doc"/>
 152     <magic>
 153       <match type="string" offset="0" value="\xaa\xaa\xaa\xaa"/>
 154     </magic>
 155     <glob pattern="*.5vw"/>
 156     <glob pattern="*.5vw.gz"/>
 157   </mime-type>
 158
 159   <mime-type type="application/x-tektronix-rf5">
 160     <comment>Packet Capture (Tektronix rf5)</comment>
 161     <generic-icon name="application-wireshark-doc"/>
 162     <magic>
 163       <match type="string" offset="0" value="\x00\x00\x02\x00\x12\x05\x00\x10"/>
 164     </magic>
 165     <glob pattern="*.rf5"/>
 166     <glob pattern="*.rf5.gz"/>
 167   </mime-type>
 168
 169   <mime-type type="application/x-micropross-mplog">
 170     <comment>Packet Capture (Micropross mplog)</comment>
 171     <generic-icon name="application-wireshark-doc"/>
 172     <magic>
 173       <match type="string" offset="0" value="MPCSII"/>
 174     </magic>
 175     <glob pattern="*.mplog"/>
 176     <glob pattern="*.mplog.gz"/>
 177   </mime-type>
 178
 179   <mime-type type="application/x-apple-packetlogger">
 180     <comment>Packet Capture (macOS PacketLogger)</comment>
 181     <generic-icon name="application-wireshark-doc"/>
 182     <glob pattern="*.pklg"/>
 183     <glob pattern="*.pklg.gz"/>
 184   </mime-type>
 185
 186   <mime-type type="application/x-endace-erf">
 187     <comment>Packet Capture (Endace ERF)</comment>
 188     <generic-icon name="application-wireshark-doc"/>
 189     <glob pattern="*.erf"/>
 190     <glob pattern="*.erf.gz"/>
 191   </mime-type>
 192
 193   <mime-type type="application/ipfix">
 194     <comment>Packet Capture (IPFIX)</comment>
 195     <generic-icon name="application-wireshark-doc"/>
 196     <glob pattern="*.ipfix"/>
 197     <glob pattern="*.ipfix.gz"/>
 198     <!-- Don't register for .pfx: that extension has another (more common) use -->
 199   </mime-type>
 200
 201   <mime-type type="application/x-ixia-vwr">
 202     <comment>Packet Capture (Ixia IxVeriWave)</comment>
 203     <generic-icon name="application-wireshark-doc"/>
 204     <glob pattern="*.vwr"/>
 205     <glob pattern="*.vwr.gz"/>
 206   </mime-type>
 207 </mime-info>