{"success":true,"data":{"ext":"pcapng","name":"PCAPNG","description":"PCAP Next Generation (PCAPNG) is a packet capture file format developed by the tcpdump project and maintained as an open community specification. It is used to store network traffic for analysis in tools such as Wireshark, tcpdump, and other packet inspection utilities, preserving interface metadata and capture information. The format is generally safe, though capture files may contain sensitive network data and should be handled carefully in forensic or security investigations.","mime":["application/vnd.tcpdump.pcapng"],"risk_level":"Safe","signatures":[{"hex":"0A 0D 0D 0A","offset":0,"sources":[{"name":"Apache Tika","url":"https://raw.githubusercontent.com/apache/tika/main/tika-core/src/main/resources/org/apache/tika/mime/tika-mimetypes.xml"},{"name":"Wikipedia","url":"https://en.wikipedia.org/wiki/List_of_file_signatures"}],"endianness":"little"}],"related":[],"usage":{"python":"def is_pcapng(file_path: str) -> bool:\n    \"\"\"Check if file is a valid PCAPNG by magic bytes.\"\"\"\n    signature = bytes([0x0A, 0x0D, 0x0D, 0x0A])\n    with open(file_path, \"rb\") as f:\n        return f.read(4) == signature","node":"function isPCAPNG(buffer: Buffer): boolean {\n  const signature = Buffer.from([0x0A, 0x0D, 0x0D, 0x0A]);\n  return buffer.subarray(0, 4).equals(signature);\n}","go":"func IsPCAPNG(data []byte) bool {\n    signature := []byte{0x0A, 0x0D, 0x0D, 0x0A}\n    if len(data) < 4 {\n        return false\n    }\n    return bytes.Equal(data[:4], signature)\n}"}}}