Wireshark · Wireshark-dev: Re: [Wireshark-dev] Processing packet before exporting it.

[Dario Lombardo <dario.lombardo.ml@xxxxxxxxx>]

On Wed, Nov 22, 2017 at 5:21 PM, Manik Khandelwal <manik123khandelwal@xxxxxxxxx> wrote:

I want to edit the bytes with full knowledge of structure.

There was such a feature in wireshark GTK gui. It has not been ported to QT yet and there are no plans at the moment for that. Maybe you could try to compile it or use some bin package that provide the old gui and play a little bit with it. For the sake of completeness: it's just a bit more than an hex editor, by the way. But points to the actual packet bytes, that makes some of the job you should do yourself with an hex editor.

Hope it helps.