/usr/share/mime/packages/wireshark.xml is in wireshark-common 2.0.2+ga16e22e-1.
This file is owned by root:root, with mode 0o644.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 | <?xml version="1.0" encoding="UTF-8"?>
<mime-info xmlns="http://www.freedesktop.org/standards/shared-mime-info">
<mime-type type="application/vnd.tcpdump.pcap">
<comment>Packet Capture (PCAP)</comment>
<generic-icon name="application-wireshark-doc"/>
<alias type="application/x-pcap"/>
<alias type="application/pcap"/>
<magic>
<!-- standard PCAP file -->
<match type="big32" offset="0" value="0xa1b2c3d4"/>
<match type="little32" offset="0" value="0xa1b2c3d4"/>
<!-- extended (Alexey-Kuznetsov's-patches) PCAP file -->
<match type="big32" offset="0" value="0xa1b2cd34"/>
<match type="little32" offset="0" value="0xa1b2cd34"/>
</magic>
<glob pattern="*.pcap"/>
<glob pattern="*.pcap.gz"/>
</mime-type>
<mime-type type="application/x-pcapng">
<comment>Packet Capture (PCAPNG)</comment>
<generic-icon name="application-wireshark-doc"/>
<magic>
<match type="big32" offset="0" value="0x0a0d0d0a">
<match type="big32" offset="8" value="0x1a2b3c4d"/>
</match>
<match type="little32" offset="0" value="0x0a0d0d0a">
<match type="little32" offset="8" value="0x1a2b3c4d"/>
</match>
</magic>
<glob pattern="*.pcapng"/>
<glob pattern="*.ntar"/>
<glob pattern="*.pcapng.gz"/>
<glob pattern="*.ntar.gz"/>
</mime-type>
<mime-type type="application/x-snoop">
<comment>Packet Capture (Snoop)</comment>
<generic-icon name="application-wireshark-doc"/>
<magic>
<match type="string" offset="0" value="snoop"/>
</magic>
<glob pattern="*.snoop"/>
<glob pattern="*.snoop.gz"/>
</mime-type>
<mime-type type="application/x-iptrace">
<comment>Packet Capture (AIX iptrace)</comment>
<generic-icon name="application-wireshark-doc"/>
<magic>
<match type="string" offset="0" value="iptrace 1.0"/>
<match type="string" offset="0" value="iptrace 2.0"/>
</magic>
</mime-type>
<mime-type type="application/x-lanalyzer">
<comment>Packet Capture (Novell LANalyzer)</comment>
<generic-icon name="application-wireshark-doc"/>
<magic>
<match type="little16" offset="0" value="0x1001"/>
<match type="little16" offset="0" value="0x1007"/>
</magic>
<glob pattern="*.tr1"/>
<glob pattern="*.tr1.gz"/>
</mime-type>
<mime-type type="application/x-nettl">
<comment>Packet Capture (HP-UX nettl)</comment>
<generic-icon name="application-wireshark-doc"/>
<magic>
<match type="string" offset="0" value="\x54\x52\x00\x64\x00"/>
</magic>
<glob pattern="*.trc0"/>
<glob pattern="*.trc1"/>
<glob pattern="*.trc0.gz"/>
<glob pattern="*.trc1.gz"/>
</mime-type>
<mime-type type="application/x-radcom">
<comment>Packet Capture (Radcom WAN/LAN Analyzer)</comment>
<generic-icon name="application-wireshark-doc"/>
<magic>
<match type="string" offset="0" value="\x42\xd2\x00\x34\x12\x66\x22\x88"/>
</magic>
</mime-type>
<mime-type type="application/x-etherpeek">
<comment>Packet Capture (Savvius/Etherpeek/Airopeek tagged/v9)</comment>
<generic-icon name="application-wireshark-doc"/>
<magic>
<match type="string" offset="0" value="\177ver"/>
</magic>
<glob pattern="*.tpc"/>
<glob pattern="*.apc"/>
<glob pattern="*.wpz"/>
<glob pattern="*.tpc.gz"/>
<glob pattern="*.apc.gz"/>
<glob pattern="*.wpz.gz"/>
</mime-type>
<mime-type type="application/x-visualnetworks">
<comment>Packet Capture (Visual Networks)</comment>
<generic-icon name="application-wireshark-doc"/>
<magic>
<match type="string" offset="0" value="\x05VNF"/>
</magic>
</mime-type>
<mime-type type="application/x-netinstobserver">
<comment>Packet Capture (Network Instruments Observer)</comment>
<generic-icon name="application-wireshark-doc"/>
<magic>
<match type="string" offset="0" value="ObserverPktBuffe"/>
</magic>
<glob pattern="*.bfr"/>
<glob pattern="*.bfr.gz"/>
</mime-type>
<mime-type type="application/x-5view">
<comment>Packet Capture (Accellent/InfoVista 5view)</comment>
<generic-icon name="application-wireshark-doc"/>
<magic>
<match type="string" offset="0" value="\xaa\xaa\xaa\xaa"/>
</magic>
<glob pattern="*.5vw"/>
<glob pattern="*.5vw.gz"/>
</mime-type>
<mime-type type="application/x-tektronix-rf5">
<comment>Packet Capture (Tektronix rf5)</comment>
<generic-icon name="application-wireshark-doc"/>
<magic>
<match type="string" offset="0" value="\x00\x00\x02\x00\x12\x05\x00\x10"/>
</magic>
<glob pattern="*.rf5"/>
<glob pattern="*.rf5.gz"/>
</mime-type>
</mime-info>
|