Format

pcap Next Generation Packet Capture

Download XML Download JSON

Summary

Name

pcap Next Generation Packet Capture

Identifiers

MIME: application/vnd.tcpdump.pcap
PUID: fmt/780

Description

The pcap Next Generation Capture file format is intended to overcome limitations in the pcap Packet Capture format.

File extensions

pcapng

Submitted by

Digital Preservation Department / The National Archives

Internal signatures

pcap-ng Big Endian

Description: Section Header Block - Block Type, Length, Magic
Provenance: https://github.com/pcapng/pcapng

Byte sequences

Min Frag Length: Absolute from BOF
Offset: 0
Max offset: 0
Byte Sequence: 0A0D0D0A{4}1A2B3C4D
Endianness: None

pcap-ng Little Endian

Description: Section Header Block - Block Type, Length, Magic
Provenance: https://github.com/pcapng/pcapng

Byte sequences

Min Frag Length: Absolute from BOF
Offset: 0
Max offset: 0
Byte Sequence: 0A0D0D0A{4}4D3C2B1A
Endianness: None

Changelog

V84

Release date

21 January 2016
- Updated
  
  pcap Next Generation Packet Capture: Corrected MIME.
V83

Release date

17 December 2015
- Added format
  
  pcap Next Generation Capture: Full entry added.
- Added signature
  
  pcap Next Generation Capture: Signature developed through PRONOM Research.