{"success":true,"data":{"ext":"dmp","name":"libpcap/tcpdump packet capture","description":"libpcap/tcpdump packet capture (DMP) is a file format used to store network traffic captures, originally developed for the tcpdump and libpcap projects and maintained through their open-source ecosystem. It is commonly used for network analysis, troubleshooting, intrusion detection, and forensic review in tools such as tcpdump, Wireshark, and related packet inspection software. The format is generally safe, though captured data may contain sensitive information and should be handled accordingly.","mime":["application/vnd.tcpdump.pcap"],"risk_level":"Safe","signatures":[{"hex":"A1 B2 C3 D4","offset":0,"sources":[{"name":"Apache Tika","url":"https://raw.githubusercontent.com/apache/tika/main/tika-core/src/main/resources/org/apache/tika/mime/tika-mimetypes.xml"}],"endianness":"big"},{"hex":"D4 C3 B2 A1","offset":0,"sources":[{"name":"Apache Tika","url":"https://raw.githubusercontent.com/apache/tika/main/tika-core/src/main/resources/org/apache/tika/mime/tika-mimetypes.xml"}],"endianness":"little"},{"hex":"4D 44 4D 50 93 A7","offset":0,"sources":[{"name":"Gary Kessler","url":"https://www.garykessler.net/library/file_sigs_GCK_latest.html"}]},{"hex":"50 41 47 45 44 55 36 34","offset":0,"sources":[{"name":"Gary Kessler","url":"https://www.garykessler.net/library/file_sigs_GCK_latest.html"}]},{"hex":"50 41 47 45 44 55 4D 50","offset":0,"sources":[{"name":"Gary Kessler","url":"https://www.garykessler.net/library/file_sigs_GCK_latest.html"}]}],"related":["cap","pcap"],"usage":{"python":"def is_dmp(file_path: str) -> bool:\n    \"\"\"Check if file is a valid DMP by magic bytes.\"\"\"\n    signature = bytes([0xA1, 0xB2, 0xC3, 0xD4])\n    with open(file_path, \"rb\") as f:\n        return f.read(4) == signature","node":"function isDMP(buffer: Buffer): boolean {\n  const signature = Buffer.from([0xA1, 0xB2, 0xC3, 0xD4]);\n  return buffer.subarray(0, 4).equals(signature);\n}","go":"func IsDMP(data []byte) bool {\n    signature := []byte{0xA1, 0xB2, 0xC3, 0xD4}\n    if len(data) < 4 {\n        return false\n    }\n    return bytes.Equal(data[:4], signature)\n}"}}}