Suricata

File magic is suffering from multiple issues:
- not predictable: the magic depends of the version
- slow: computing magic on all files for logging is killing performance

Rust has a crate tree magic mini (https://docs.rs/tree_magic_mini/latest/tree_magic_mini/) licensed under MIT if the database file is not embedded. This is really faster than magic and mime type are really more reproducible. Having the mime type as an alternative for magic is thus interesting.