First time here? Check out the FAQ!
THIS IS A TEST INSTANCE. Feel free to ask and answer questions, but take care to avoid triggering too many notifications.
Ask Your Question
0

How Can i edit pcap files in wireshark

I have some existing pcap files, which needs to be change in the checksum values. So, Is it possible to edit pcap file in wireshark, If yes, please explain it?

Thanks, Haritha Alla.

Haritha Alla's avatar
1
Haritha Alla
asked 2020-06-30 08:55:49 +0000
edit flag offensive 0 remove flag close merge delete

Comments

add a comment see more comments

1 Answer

0

It's not currently possible. The old GTK+ version had some limited editing capabilities; that might have required building with non-default configuration options. I don't think that code was reimplemented for the Qt version.

WireEdit clainms to be a "Full Stack WYSIWYG Pcap Editor"; it's not free in either the "source available" or "doesn't cost money" sense.

Some other tools that can edit captures are listed on the Wireshark Wiki's Tools page; some just anonymize packets, but others may allow other changes, such as checksum changes, to be made.

Guy Harris's avatar
19.9k
Guy Harris
answered 2020-06-30 09:30:19 +0000
edit flag offensive 0 remove flag delete link
more

Comments

Okay we will look in to that, Thank you for quick reply

Haritha Alla's avatar Haritha Alla (2020-06-30 09:48:40 +0000) edit
more
  • delete
add a comment see more comments

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account. This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.

Add Answer