Ask Your Question

Revision history [back]

click to hide/show revision 1
initial version

It's not currently possible. The old GTK+ version had some limited editing capabilities; that might have required building with non-default configuration options. I don't think that code was reimplemented for the Qt version.

WireEdit clainms to be a "Full Stack WYSIWYG Pcap Editor"; it's not free in either the "source available" or "doesn't cost money" sense.

Some other tools that can edit captures are listed on the Wireshark Wiki's Tools page; some just anonymize packets, but others may allow other changes, such as checksum changes, to be made.