Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-users: Re: [Wireshark-users] Editing packets with Wireshark and replay?

From: Stephen Fisher <stephentfisher@xxxxxxxxx>
Date: Thu, 27 Dec 2007 10:10:28 -0700
On Thu, Dec 27, 2007 at 08:29:47AM -0800, jacob c wrote:

> Is there any method with Wireshark (or other tool) to modify the ip 
> addreseses in a packet capture before giving the file to another 
> vendor for analysis. For example can I substitute all the packets with 
> address 1.1.1.1 with 2.2.2.2?

Tcpreplay may suit your needs:

  http://tcpreplay.synfin.net/trac/

Wireshark does not have this functionality.


Steve