[
https://issues.apache.org/jira/browse/TIKA-4002?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17725963#comment-17725963
]
Gregory Lepore commented on TIKA-4002:
--------------------------------------
There are two versions of pcap in PRONOM, I missed the "next gen" version:
[https://www.nationalarchives.gov.uk/PRONOM/Format/proFormatSearch.aspx?status=detailReport&id=1579&strPageToDisplay=signatures]
Name pcap-ng Big Endian
Description Section Header Block - Block Type, Length, Magic
Byte sequences
Position type Absolute from BOF
Offset 0
Maximum Offset 0
Byte order
Value 0A0D0D0A\{4}1A2B3C4D
Name pcap-ng Little Endian
Description Section Header Block - Block Type, Length, Magic
Byte sequences
Position type Absolute from BOF
Offset 0
Maximum Offset 0
Byte order
Value 0A0D0D0A\{4}4D3C2B1A
> application/vnd.tcpdump.pcap
> ----------------------------
>
> Key: TIKA-4002
> URL: https://issues.apache.org/jira/browse/TIKA-4002
> Project: Tika
> Issue Type: Sub-task
> Reporter: Tim Allison
> Priority: Major
> Attachments: fmt_779_pcap_Packet_Capture_small_capture.pcap
>
>
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
