ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
July 17th, 2024 | 10:00am-11:55am SGT (UTC+8) | Online

Ethereal-users: Re: [Ethereal-users] editing tcpdumpcapture files

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Wed, 9 Apr 2003 01:34:56 -0700
On Tue, Apr 08, 2003 at 05:38:24PM -0600, earl eiland wrote:
> Where  can I find the file format for tcpdump capture files?  I need to 
> edit some data.

You might be able to do it using libpcap to read and write the capture
file, and thus avoid having to write your own code to read and write it.