Ask Your Question

How Can i edit pcap files in wireshark

asked 2020-06-30 08:55:49 +0000

Haritha Alla gravatar image

I have some existing pcap files, which needs to be change in the checksum values. So, Is it possible to edit pcap file in wireshark, If yes, please explain it?

Thanks, Haritha Alla.

edit retag flag offensive close merge delete

1 Answer

Sort by ยป oldest newest most voted

answered 2020-06-30 09:30:19 +0000

Guy Harris gravatar image

It's not currently possible. The old GTK+ version had some limited editing capabilities; that might have required building with non-default configuration options. I don't think that code was reimplemented for the Qt version.

WireEdit clainms to be a "Full Stack WYSIWYG Pcap Editor"; it's not free in either the "source available" or "doesn't cost money" sense.

Some other tools that can edit captures are listed on the Wireshark Wiki's Tools page; some just anonymize packets, but others may allow other changes, such as checksum changes, to be made.

edit flag offensive delete link more


Okay we will look in to that, Thank you for quick reply

Haritha Alla gravatar imageHaritha Alla ( 2020-06-30 09:48:40 +0000 )edit

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools


Asked: 2020-06-30 08:55:49 +0000

Seen: 2,601 times

Last updated: Jun 30 '20