This question is more of scratch the itch sort of question and OCD on having the ability to determine what a file is without having access to 'capinfos'.

I rather not go the brute force method of running Wireshark and capturing a bunch of files. So what I would like is a good location to find what are the specific magic numbers used in the standard set of files that Wireshark can understand. The capture file was generated in a CENTOS VM hosted on a standard Intel/windows 7 platform. However, when looking at an 'od -x ' I noticed that the byte ordering was flip on a pcapng file. I took a step back and used capinfos command to determine the file type. However, I did notice that one of the Solaris (Intel/x86-64) 11.3 VM I just built thinks my capture files are just 'data'. I was trying to use the file command on various sets of hardware to fully automate data analysis of network performance on Wireshark capture files on Cygwin, CENTOS, and Solaris.

TLR/DNR - use of magic numbers in capture files - what are they

Find .ico in wireshark pcap