What is the exact 8-byte signature that identifies a PNG file?

Study for the Wireshark Block 5 Exam. Prepare with flashcards and multiple choice questions, each offering hints and explanations. Ace your exam with the best resources!

Multiple Choice

What is the exact 8-byte signature that identifies a PNG file?

Explanation:
The 8-byte sequence used to identify a PNG file is the exact header at the very start: 89 50 4E 47 0D 0A 1A 0A. The first byte, 0x89, is a non-ASCII value chosen to help detect corrupted transfers of binary data. The next three bytes spell PNG in ASCII (0x50, 0x4E, 0x47). The final quartet (0x0D 0x0A 0x1A 0x0A) enforces proper line endings and adds a control character, aiding in detecting truncation or tampering. This 8-byte signature is what a parser checks first to confirm a PNG file. Other formats have different signatures—for example, JPEG typically starts with 0xFF 0xD8, PDF with "%PDF" (0x25 0x50 0x44 0x46), and ZIP with "PK" (0x50 0x4B 0x03 0x04)—so they don’t match the PNG header.

The 8-byte sequence used to identify a PNG file is the exact header at the very start: 89 50 4E 47 0D 0A 1A 0A. The first byte, 0x89, is a non-ASCII value chosen to help detect corrupted transfers of binary data. The next three bytes spell PNG in ASCII (0x50, 0x4E, 0x47). The final quartet (0x0D 0x0A 0x1A 0x0A) enforces proper line endings and adds a control character, aiding in detecting truncation or tampering. This 8-byte signature is what a parser checks first to confirm a PNG file. Other formats have different signatures—for example, JPEG typically starts with 0xFF 0xD8, PDF with "%PDF" (0x25 0x50 0x44 0x46), and ZIP with "PK" (0x50 0x4B 0x03 0x04)—so they don’t match the PNG header.

Subscribe

Get the latest from Passetra

You can unsubscribe at any time. Read our privacy policy