Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Ethereal-users: Re: [Ethereal-users] editing tcpdumpcapture files

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Wed, 9 Apr 2003 01:34:56 -0700
On Tue, Apr 08, 2003 at 05:38:24PM -0600, earl eiland wrote:
> Where  can I find the file format for tcpdump capture files?  I need to 
> edit some data.

You might be able to do it using libpcap to read and write the capture
file, and thus avoid having to write your own code to read and write it.