Format
pcap Next Generation Packet Capture
Summary
- Name
- pcap Next Generation Packet Capture
- Identifiers
-
- MIME: application/vnd.tcpdump.pcap
- PUID: fmt/780
- Description
- The pcap Next Generation Capture file format is intended to overcome limitations in the pcap Packet Capture format.
- File extensions
-
pcapng - Source
- Digital Preservation Department / The National Archives
Internal signatures
pcap-ng Big Endian
- Note
- Section Header Block - Block Type, Length, Magic
Byte sequences
- Min Frag Length
- Absolute from BOF
- Offset
- 0
- Max offset
- 0
- Byte Sequence
0A0D0D0A{4}1A2B3C4D- Endianness
- None
pcap-ng Little Endian
- Note
- Section Header Block - Block Type, Length, Magic
Byte sequences
- Min Frag Length
- Absolute from BOF
- Offset
- 0
- Max offset
- 0
- Byte Sequence
0A0D0D0A{4}4D3C2B1A- Endianness
- None