1 <?xml version="1.0" encoding="UTF-8"?>
4 This file allows freedesktop.org-compliant desktops (such as GNOME and
5 KDE) to know which files should be opened by what program (and what icon
6 to show for the file in a file browser).
8 Both magic and file name glob patterns are supported; glob patterns are
9 preferred since they don't require opening and reading part of
10 the file to determine its type.
12 The specification for this file can be found here:
13 https://standards.freedesktop.org/shared-mime-info-spec/latest/
16 Note that ideally the MIME types listed here should be IANA-registered:
18 https://www.iana.org/assignments/media-types/media-types.xhtml
20 If your file type is not registered then using one of the
21 (not-really-a-good-idea and deprecated) x- media types is the only option
22 if you want files to be associated with Wireshark in
23 freedesktop.org-compliant file browsers.
26 NOTE: if you do add a MIME type here, don't forget to add it to the list
27 of MIME types handled by Wireshark in org.wireshark.Wireshark.desktop.
30 <mime-info xmlns="http://www.freedesktop.org/standards/shared-mime-info">
31 <mime-type type="application/vnd.tcpdump.pcap">
32 <comment>Packet Capture (PCAP)</comment>
33 <generic-icon name="org.wireshark.Wireshark-mimetype"/>
34 <alias type="application/x-pcap"/>
35 <alias type="application/pcap"/>
37 <!-- standard PCAP file -->
38 <match type="big32" offset="0" value="0xa1b2c3d4"/>
39 <match type="little32" offset="0" value="0xa1b2c3d4"/>
40 <!-- extended (Alexey-Kuznetsov's-patches) PCAP file -->
41 <match type="big32" offset="0" value="0xa1b2cd34"/>
42 <match type="little32" offset="0" value="0xa1b2cd34"/>
44 <glob pattern="*.pcap"/>
45 <glob pattern="*.pcap.gz"/>
46 <glob pattern="*.pcap.zst"/>
47 <glob pattern="*.pcap.lz4"/>
50 <mime-type type="application/x-pcapng">
51 <comment>Packet Capture (PCAPNG)</comment>
52 <generic-icon name="org.wireshark.Wireshark-mimetype"/>
54 <match type="big32" offset="0" value="0x0a0d0d0a">
55 <match type="big32" offset="8" value="0x1a2b3c4d"/>
57 <match type="little32" offset="0" value="0x0a0d0d0a">
58 <match type="little32" offset="8" value="0x1a2b3c4d"/>
61 <glob pattern="*.pcapng"/>
62 <glob pattern="*.scap"/>
63 <glob pattern="*.ntar"/>
64 <glob pattern="*.pcapng.gz"/>
65 <glob pattern="*.scap.gz"/>
66 <glob pattern="*.ntar.gz"/>
67 <glob pattern="*.pcapng.zst"/>
68 <glob pattern="*.scap.zst"/>
69 <glob pattern="*.ntar.zst"/>
70 <glob pattern="*.pcapng.lz4"/>
71 <glob pattern="*.scap.lz4"/>
72 <glob pattern="*.ntar.lz4"/>
75 <mime-type type="application/x-snoop">
76 <comment>Packet Capture (Snoop)</comment>
77 <generic-icon name="org.wireshark.Wireshark-mimetype"/>
79 <match type="string" offset="0" value="snoop"/>
81 <glob pattern="*.snoop"/>
82 <glob pattern="*.snoop.gz"/>
83 <glob pattern="*.snoop.zst"/>
84 <glob pattern="*.snoop.lz4"/>
87 <mime-type type="application/x-iptrace">
88 <comment>Packet Capture (AIX iptrace)</comment>
89 <generic-icon name="org.wireshark.Wireshark-mimetype"/>
91 <match type="string" offset="0" value="iptrace 1.0"/>
92 <match type="string" offset="0" value="iptrace 2.0"/>
96 <mime-type type="application/x-lanalyzer">
97 <comment>Packet Capture (Novell LANalyzer)</comment>
98 <generic-icon name="org.wireshark.Wireshark-mimetype"/>
100 <match type="little16" offset="0" value="0x1001"/>
101 <match type="little16" offset="0" value="0x1007"/>
103 <glob pattern="*.tr1"/>
104 <glob pattern="*.tr1.gz"/>
105 <glob pattern="*.tr1.zst"/>
106 <glob pattern="*.tr1.lz4"/>
109 <mime-type type="application/x-nettl">
110 <comment>Packet Capture (HP-UX nettl)</comment>
111 <generic-icon name="org.wireshark.Wireshark-mimetype"/>
113 <match type="string" offset="0" value="\x54\x52\x00\x64\x00"/>
115 <glob pattern="*.trc0"/>
116 <glob pattern="*.trc1"/>
117 <glob pattern="*.trc0.gz"/>
118 <glob pattern="*.trc1.gz"/>
119 <glob pattern="*.trc0.zst"/>
120 <glob pattern="*.trc1.zst"/>
121 <glob pattern="*.trc0.lz4"/>
122 <glob pattern="*.trc1.lz4"/>
125 <mime-type type="application/x-radcom">
126 <comment>Packet Capture (Radcom WAN/LAN Analyzer)</comment>
127 <generic-icon name="org.wireshark.Wireshark-mimetype"/>
129 <match type="string" offset="0" value="\x42\xd2\x00\x34\x12\x66\x22\x88"/>
133 <mime-type type="application/x-etherpeek">
134 <comment>Packet Capture (WildPackets/Savvius/LiveAction *Peek)</comment>
135 <generic-icon name="org.wireshark.Wireshark-mimetype"/>
137 <match type="string" offset="0" value="\177ver"/>
139 <glob pattern="*.apc"/>
140 <glob pattern="*.pkt"/>
141 <glob pattern="*.tpc"/>
142 <glob pattern="*.wpz"/>
143 <glob pattern="*.apc.gz"/>
144 <glob pattern="*.pkt.gz"/>
145 <glob pattern="*.tpc.gz"/>
146 <glob pattern="*.wpz.gz"/>
147 <glob pattern="*.apc.zst"/>
148 <glob pattern="*.pkt.zst"/>
149 <glob pattern="*.tpc.zst"/>
150 <glob pattern="*.wpz.zst"/>
151 <glob pattern="*.apc.lz4"/>
152 <glob pattern="*.pkt.lz4"/>
153 <glob pattern="*.tpc.lz4"/>
154 <glob pattern="*.wpz.lz4"/>
157 <mime-type type="application/x-visualnetworks">
158 <comment>Packet Capture (Visual Networks)</comment>
159 <generic-icon name="org.wireshark.Wireshark-mimetype"/>
161 <match type="string" offset="0" value="\x05VNF"/>
165 <mime-type type="application/x-netinstobserver">
166 <comment>Packet Capture (Network Instruments/Viavi Observer)</comment>
167 <generic-icon name="org.wireshark.Wireshark-mimetype"/>
169 <match type="string" offset="0" value="ObserverPktBuffe"/>
171 <glob pattern="*.bfr"/>
172 <glob pattern="*.bfr.gz"/>
173 <glob pattern="*.bfr.zst"/>
174 <glob pattern="*.bfr.lz4"/>
177 <mime-type type="application/x-5view">
178 <comment>Packet Capture (Accellent/InfoVista 5view)</comment>
179 <generic-icon name="org.wireshark.Wireshark-mimetype"/>
181 <match type="string" offset="0" value="\xaa\xaa\xaa\xaa"/>
183 <glob pattern="*.5vw"/>
184 <glob pattern="*.5vw.gz"/>
185 <glob pattern="*.5vw.zst"/>
186 <glob pattern="*.5vw.lz4"/>
189 <mime-type type="application/x-tektronix-rf5">
190 <comment>Packet Capture (Tektronix rf5)</comment>
191 <generic-icon name="org.wireshark.Wireshark-mimetype"/>
193 <match type="string" offset="0" value="\x00\x00\x02\x00\x12\x05\x00\x10"/>
195 <glob pattern="*.rf5"/>
196 <glob pattern="*.rf5.gz"/>
197 <glob pattern="*.rf5.zst"/>
198 <glob pattern="*.rf5.lz4"/>
201 <mime-type type="application/x-micropross-mplog">
202 <comment>Packet Capture (Micropross mplog)</comment>
203 <generic-icon name="org.wireshark.Wireshark-mimetype"/>
205 <match type="string" offset="0" value="MPCSII"/>
207 <glob pattern="*.mplog"/>
208 <glob pattern="*.mplog.gz"/>
209 <glob pattern="*.mplog.zst"/>
210 <glob pattern="*.mplog.lz4"/>
213 <mime-type type="application/x-apple-packetlogger">
214 <comment>Packet Capture (macOS PacketLogger)</comment>
215 <generic-icon name="org.wireshark.Wireshark-mimetype"/>
216 <glob pattern="*.pklg"/>
217 <glob pattern="*.pklg.gz"/>
218 <glob pattern="*.pklg.zst"/>
219 <glob pattern="*.pklg.lz4"/>
222 <mime-type type="application/x-endace-erf">
223 <comment>Packet Capture (Endace ERF)</comment>
224 <generic-icon name="org.wireshark.Wireshark-mimetype"/>
225 <glob pattern="*.erf"/>
226 <glob pattern="*.erf.gz"/>
227 <glob pattern="*.erf.zst"/>
228 <glob pattern="*.erf.lz4"/>
231 <mime-type type="application/ipfix">
232 <comment>Packet Capture (IPFIX)</comment>
233 <generic-icon name="org.wireshark.Wireshark-mimetype"/>
234 <glob pattern="*.ipfix"/>
235 <glob pattern="*.ipfix.gz"/>
236 <glob pattern="*.ipfix.zst"/>
237 <glob pattern="*.ipfix.lz4"/>
238 <!-- Don't register for .pfx: that extension has another (more common) use -->
241 <mime-type type="application/x-ixia-vwr">
242 <comment>Packet Capture (Ixia IxVeriWave)</comment>
243 <generic-icon name="org.wireshark.Wireshark-mimetype"/>
244 <glob pattern="*.vwr"/>
245 <glob pattern="*.vwr.gz"/>
246 <glob pattern="*.vwr.zst"/>
247 <glob pattern="*.vwr.lz4"/>
250 <mime-type type="application/x-rtpdump">
251 <comment>RTP packet stream (RTPDump)</comment>
252 <generic-icon name="org.wireshark.Wireshark-mimetype"/>
254 <match type="string" offset="0" value="#!rtpplay1.0 "/>
256 <glob pattern="*.rtp"/>
257 <glob pattern="*.rtp.gz"/>
258 <glob pattern="*.rtp.zst"/>
259 <glob pattern="*.rtp.lz4"/>
262 <mime-type type="application/x-ems">
263 <comment>EGNOS Message Server (EMS) file</comment>
264 <generic-icon name="org.wireshark.Wireshark-mimetype"/>
265 <glob pattern="*.ems"/>