/usr/share/mime/packages/wireshark.xml is in wireshark-common 2.4.5-1.
This file is owned by root:root, with mode 0o644.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189 190 191 192 193 194 195 196 197 198 199 200 201 202 203 204 205 206 207 | <?xml version="1.0" encoding="UTF-8"?>
<!--
This file allows freedesktop.org-compliant desktops (such as GNOME and
KDE) to know which files should be opened by what program (and what icon
to show for the file in a file browser).
Both magic and file name glob patterns are supported; glob patterns are
preferred since they don't require require opening and reading part of
the file to determine its type.
The specification for this file can be found here:
https://standards.freedesktop.org/shared-mime-info-spec/latest/
Note that ideally the MIME types listed here should be IANA-registered:
https://www.iana.org/assignments/media-types/media-types.xhtml
If your file type is not registered then using one of the
(not-really-a-good-idea and deprecated) x- media types is the only option
if you want files to be associated with Wireshark in
freedesktop.org-compliant file browsers.
NOTE: if you do add a MIME type here, don't forget to add it to the list
of MIME types handled by Wireshark in wireshark.desktop.
-->
<mime-info xmlns="http://www.freedesktop.org/standards/shared-mime-info">
<mime-type type="application/vnd.tcpdump.pcap">
<comment>Packet Capture (PCAP)</comment>
<generic-icon name="application-wireshark-doc"/>
<alias type="application/x-pcap"/>
<alias type="application/pcap"/>
<magic>
<!-- standard PCAP file -->
<match type="big32" offset="0" value="0xa1b2c3d4"/>
<match type="little32" offset="0" value="0xa1b2c3d4"/>
<!-- extended (Alexey-Kuznetsov's-patches) PCAP file -->
<match type="big32" offset="0" value="0xa1b2cd34"/>
<match type="little32" offset="0" value="0xa1b2cd34"/>
</magic>
<glob pattern="*.pcap"/>
<glob pattern="*.pcap.gz"/>
</mime-type>
<mime-type type="application/x-pcapng">
<comment>Packet Capture (PCAPNG)</comment>
<generic-icon name="application-wireshark-doc"/>
<magic>
<match type="big32" offset="0" value="0x0a0d0d0a">
<match type="big32" offset="8" value="0x1a2b3c4d"/>
</match>
<match type="little32" offset="0" value="0x0a0d0d0a">
<match type="little32" offset="8" value="0x1a2b3c4d"/>
</match>
</magic>
<glob pattern="*.pcapng"/>
<glob pattern="*.ntar"/>
<glob pattern="*.pcapng.gz"/>
<glob pattern="*.ntar.gz"/>
</mime-type>
<mime-type type="application/x-snoop">
<comment>Packet Capture (Snoop)</comment>
<generic-icon name="application-wireshark-doc"/>
<magic>
<match type="string" offset="0" value="snoop"/>
</magic>
<glob pattern="*.snoop"/>
<glob pattern="*.snoop.gz"/>
</mime-type>
<mime-type type="application/x-iptrace">
<comment>Packet Capture (AIX iptrace)</comment>
<generic-icon name="application-wireshark-doc"/>
<magic>
<match type="string" offset="0" value="iptrace 1.0"/>
<match type="string" offset="0" value="iptrace 2.0"/>
</magic>
</mime-type>
<mime-type type="application/x-lanalyzer">
<comment>Packet Capture (Novell LANalyzer)</comment>
<generic-icon name="application-wireshark-doc"/>
<magic>
<match type="little16" offset="0" value="0x1001"/>
<match type="little16" offset="0" value="0x1007"/>
</magic>
<glob pattern="*.tr1"/>
<glob pattern="*.tr1.gz"/>
</mime-type>
<mime-type type="application/x-nettl">
<comment>Packet Capture (HP-UX nettl)</comment>
<generic-icon name="application-wireshark-doc"/>
<magic>
<match type="string" offset="0" value="\x54\x52\x00\x64\x00"/>
</magic>
<glob pattern="*.trc0"/>
<glob pattern="*.trc1"/>
<glob pattern="*.trc0.gz"/>
<glob pattern="*.trc1.gz"/>
</mime-type>
<mime-type type="application/x-radcom">
<comment>Packet Capture (Radcom WAN/LAN Analyzer)</comment>
<generic-icon name="application-wireshark-doc"/>
<magic>
<match type="string" offset="0" value="\x42\xd2\x00\x34\x12\x66\x22\x88"/>
</magic>
</mime-type>
<mime-type type="application/x-etherpeek">
<comment>Packet Capture (Savvius/Etherpeek/Airopeek tagged/v9)</comment>
<generic-icon name="application-wireshark-doc"/>
<magic>
<match type="string" offset="0" value="\177ver"/>
</magic>
<glob pattern="*.apc"/>
<glob pattern="*.pkt"/>
<glob pattern="*.tpc"/>
<glob pattern="*.wpz"/>
<glob pattern="*.apc.gz"/>
<glob pattern="*.pkt.gz"/>
<glob pattern="*.tpc.gz"/>
<glob pattern="*.wpz.gz"/>
</mime-type>
<mime-type type="application/x-visualnetworks">
<comment>Packet Capture (Visual Networks)</comment>
<generic-icon name="application-wireshark-doc"/>
<magic>
<match type="string" offset="0" value="\x05VNF"/>
</magic>
</mime-type>
<mime-type type="application/x-netinstobserver">
<comment>Packet Capture (Network Instruments Observer)</comment>
<generic-icon name="application-wireshark-doc"/>
<magic>
<match type="string" offset="0" value="ObserverPktBuffe"/>
</magic>
<glob pattern="*.bfr"/>
<glob pattern="*.bfr.gz"/>
</mime-type>
<mime-type type="application/x-5view">
<comment>Packet Capture (Accellent/InfoVista 5view)</comment>
<generic-icon name="application-wireshark-doc"/>
<magic>
<match type="string" offset="0" value="\xaa\xaa\xaa\xaa"/>
</magic>
<glob pattern="*.5vw"/>
<glob pattern="*.5vw.gz"/>
</mime-type>
<mime-type type="application/x-tektronix-rf5">
<comment>Packet Capture (Tektronix rf5)</comment>
<generic-icon name="application-wireshark-doc"/>
<magic>
<match type="string" offset="0" value="\x00\x00\x02\x00\x12\x05\x00\x10"/>
</magic>
<glob pattern="*.rf5"/>
<glob pattern="*.rf5.gz"/>
</mime-type>
<mime-type type="application/x-micropross-mplog">
<comment>Packet Capture (Micropross mplog)</comment>
<generic-icon name="application-wireshark-doc"/>
<magic>
<match type="string" offset="0" value="MPCSII"/>
</magic>
<glob pattern="*.mplog"/>
<glob pattern="*.mplog.gz"/>
</mime-type>
<mime-type type="application/x-apple-packetlogger">
<comment>Packet Capture (macOS PacketLogger)</comment>
<generic-icon name="application-wireshark-doc"/>
<glob pattern="*.pklg"/>
<glob pattern="*.pklg.gz"/>
</mime-type>
<mime-type type="application/x-endace-erf">
<comment>Packet Capture (Endace ERF)</comment>
<generic-icon name="application-wireshark-doc"/>
<glob pattern="*.erf"/>
<glob pattern="*.erf.gz"/>
</mime-type>
<mime-type type="application/ipfix">
<comment>Packet Capture (IPFIX)</comment>
<generic-icon name="application-wireshark-doc"/>
<glob pattern="*.ipfix"/>
<glob pattern="*.ipfix.gz"/>
<!-- Don't register for .pfx: that extension has another (more common) use -->
</mime-type>
<mime-type type="application/x-ixia-vwr">
<comment>Packet Capture (Ixia IxVeriWave)</comment>
<generic-icon name="application-wireshark-doc"/>
<glob pattern="*.vwr"/>
<glob pattern="*.vwr.gz"/>
</mime-type>
</mime-info>
|