Wireshark-users: Re: [Wireshark-users] Changing timestamps

From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Thu, 03 Jan 2008 00:21:48 -0800

Trebor Sreyb wrote:

Is there another approach I might take to accomplish this task?

Write:

	a Perl script using Net::Pcap?

		http://search.cpan.org/~kcarnut/Net-Pcap-0.05/Pcap.pm

	a Python script using python-libpcap

		http://sourceforge.net/projects/pylibpcap/
		
	    or pcapy?

		http://oss.coresecurity.com/projects/pcapy.html

	a Ruby script using Ruby/Pcap?

		http://www.goto.info.waseda.ac.jp/~fukusima/ruby/pcap-e.html

Or perhaps you can do it with Netdude?

	http://netdude.sourceforge.net/

(This is why we don't have our own capture file format - using a standard format means there are tons of tools available to use on Wireshark captures, and that Wireshark can read captures from other tools.)