Wireshark · Ethereal-dev: [Ethereal-dev] edit particular particular number of data using

["Durai" <mail_714@xxxxxxxxxxx>]

Hello All,

I can edit the packets with -r option only by giving the ranges of numbers.

$ tethereal -r data.pcap
  1   0.000000  172.16.1.49 -> Broadcast    ARP Who has 172.16.1.200?  Tell
172.16.1.49
  2   0.000126 172.16.1.158 -> 172.16.1.26  TELNET Telnet Data ...
  3   0.000187 172.16.1.158 -> 172.16.1.26  TELNET Telnet Data ...
  4   0.000247 172.16.1.158 -> 172.16.1.26  TELNET Telnet Data ...
  5   0.000304 172.16.1.158 -> 172.16.1.26  TELNET Telnet Data ...

$ editcap -r -T tr data.pcap final.pcap 1-2
Add_Selected: 1-2
Inclusive ... 1, 2

$ tethereal -r final.pcap
  1   0.000000 4d:01:75:bc:08:06 -> ff:ff:ff:ff:00:0b TR Token-Ring Unknown
  2   0.000126 6e:48:94:e6:08:00 -> cd:01:76:29:00:30 TR MAC Unknown Major
Vector: 48

How can I edit a particular packet? Eg: I want to edit the packet number 4.

Regards,
Durai.


---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.698 / Virus Database: 455 - Release Date: 6/2/2004