Ethereal-users: RE: [Ethereal-users] edit a captured file

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Biot Olivier <Olivier.Biot@xxxxxxxxxxx>
Date: Fri, 20 Feb 2004 11:31:11 +0100
|From: john g
|
|is there a way to edit a capture file ?

There's no builtin way of editing a capture file. You can however use the
command-line text2pcap program to convert a text file with a packet hexdump
into libpcap format.

See the manual page for text2pcap:

http://www.ethereal.com/docs/man-pages/text2pcap.1.html

If you really know what you're doing, you may want to use a hex editor to
manually edit existing packet capture files. You can even use VIM (or gvim)
for this by converting from binary to hex and back.

Regards,

Olivier