- Name
- Network Packet Capture (libpcap)
- Extension
- .pcap
- Format
- Binary
- Category
- Other
- Developer
- Lawrence Berkeley National Laboratory
- Description
- PCAP files are network packet captures written by tcpdump, Wireshark and other libpcap-based tools. They store the packets recorded from a network interface in order, each with a timestamp and its raw bytes, and are analysed in tools such as Wireshark. The pcap magic exists in two byte orders (d4 c3 b2 a1 and a1 b2 c3 d4) for little- and big-endian writers.
- MIME Type
- application/vnd.tcpdump.pcap