Ethereal-users: Re: [Ethereal-users] fix cap file

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Marco van den Bovenkamp <marco@xxxxxxxxxxxxxxxxxxx>
Date: Thu, 11 Aug 2005 17:32:05 +0200
Jordi Casas wrote:

Hi, I have a file "CAP" which is damaged, I would like to know if some
tool exists to recover it.
The mistake consists of the fact that a package occupies more of the allowed.

If you know which packet in the file is damaged, editcap should be able to do what you need, by doing something like 'editcap <damaged file> <new file> <nr. of damaged packet>'

Take a look at the editcap manpage for more info.

--

		Regards,

			Marco.