// REFERENCE
PCAP capture signature
Signature (hex): D4 C3 B2 A1 / A1 B2 C3 D4
A PCAP capture (libpcap) starts with D4 C3 B2 A1 or A1 B2 C3 D4 depending on endianness. It's the classic network-traffic format of Wireshark/tcpdump.
Related tools
Work with this in:
Related
sqlite
SQLite database signature pcapng
PCAPNG capture signature torrent
.torrent signature eml
EML email signature woff2
WOFF2 font signature ttf
TTF font signature
SQLite database signature pcapng
PCAPNG capture signature torrent
.torrent signature eml
EML email signature woff2
WOFF2 font signature ttf
TTF font signature
Signatures verifiable with CyberEscudo's magic-bytes identifier. Educational content.