Libpcap File Format (nanosecond-resolution) — file signature A1 B2 3C 4D (big-endian) at offset 0

For Libpcap File Format (nanosecond-resolution), hex signature is A1 B2 3C 4D (big-endian); offset is 0; extension is pcap, verified against its source on 2026-09-22.

What the source says

4D 3C B2 A1 (little-endian) | M<²¡ | 0 | pcap | Libpcap File Format (nanosecond-resolution) [2] | A1 B2 3C 4D (big-endian) | ¡²<M |

— en.wikipedia.org, retrieved 2026-09-22

Source

• en.wikipedia.orghttps://en.wikipedia.org/wiki/List_of_file_signatures

Last verified against source: 2026-09-22. Due for re-check by 2027-09-22. This page as Markdown · OKF bundle · full dataset as JSON.