Edit Pcap

If computers swore, they'd tell you to go to hex

ADVANCED TOPICS
ANALYZE PCAP
GET PCAP
GET STARTED
Pcap File
Edit Pcap

There are various utilities that can be used to edit packet captures. The four that come with wireshark are editcap, mergecap, reordercap, and text2pcap.

Table of Contents

  • editcap
  • Don't forget to spellcheck your pcaps!

  • reordercap
  • I am still making order out of chaos by reinvention. — John le Carre

  • mergecap
  • Merge captures together

  • text2pcap
  • Write programs to handle text streams, because that is a universal interface – Doug McIlroy

  • Editing Hex
  • Put a hex on your hex