[File] [PATCH] Add magic definition for nfdump binary files

Peter Haag peter at pyxis.ch
Tue Jul 28 12:24:35 EDT 2026


Hi Christos,

Please find below a proposed magic definition entry to support the identification
of nfdump binary flow data files for the file command. (https://github.com/phaag/nfdump)
The initial header signature at offset 0 of the file is a 16-bit uint16_t with const value 0xA50C.

Thank you for maintaining the file utility

Best regards

	- Peter



-------------- next part --------------
# Type:  nfdump binary flow data
# Extension: .nf / .nfd / .nfdump
# URL:   https://github.com/phaag/nfdump
# Maintainer: Peter Haag <peter at epyxis.ch>

0    leshort    0xA50C    
>2   leshort    >0        nfdump binary flow data (little-endian)
!:mime application/x-nfdump

0    beshort    0xA50C    
>2   beshort    >0        nfdump binary flow data (big-endian)
!:mime application/x-nfdump

-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature.asc
Type: application/pgp-signature
Size: 840 bytes
Desc: OpenPGP digital signature
URL: <http://mailman.astron.com/pipermail/file/attachments/20260728/4e315ceb/attachment.asc>


More information about the File mailing list