How Can i edit pcap files in wireshark

asked 2020-06-30 08:55:49 +0000

Haritha Alla
1 ●1 ●1 ●1

I have some existing pcap files, which needs to be change in the checksum values. So, Is it possible to edit pcap file in wireshark, If yes, please explain it?

Thanks, Haritha Alla.

answered 2020-06-30 09:30:19 +0000

Guy Harris
19890 ●3 ●633 ●207

It's not currently possible. The old GTK+ version had some limited editing capabilities; that might have required building with non-default configuration options. I don't think that code was reimplemented for the Qt version.

WireEdit clainms to be a "Full Stack WYSIWYG Pcap Editor"; it's not free in either the "source available" or "doesn't cost money" sense.

Some other tools that can edit captures are listed on the Wireshark Wiki's Tools page; some just anonymize packets, but others may allow other changes, such as checksum changes, to be made.

edit flag offensive delete link

Comments

Okay we will look in to that, Thank you for quick reply

Haritha Alla ( 2020-06-30 09:48:40 +0000 )edit

add a comment

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

How Can i edit pcap files in wireshark

1 Answer

Comments

Your Answer

Question Tools

Stats

How Can i edit pcap files in wireshark edit

1 Answer

Comments

Your Answer

Question Tools

Stats

How Can i edit pcap files in wireshark