Wireshark mailing list archives
Re: How to edit a specific byte in a pcap file ?
From: Jaap Keuter <jaap.keuter () xs4all nl>
Date: Fri, 26 Feb 2010 19:24:09 +0100
Hi, Sounds you could use a true hex editor. You'll have to target the byte by hand, but you seem to know what you're looking for. Thanks, Jaap Shashank Agarwal wrote:
Hi, How can I modify a specific byte using WireShark or any of its tools. I tried bit-twiste, tcprewrite, tcpreplay-edit, but to no avail. These tools provide predefined and limited editing capability like editing the IP address or TCP port or changing timestamp etc. E.g. I have the hex bytes from an ethernet broadcast packet - ff ff ff ff ff ff 00 0b 20 40 15 6d 19 02 40 ...... First six bytes is dest. address, next 6 bytes is source address, "19 02" is packet type and the 15th byte (0x40) contains a flag. I want to turn on the second bit in this 15th byte. Essentially replacing 0x40 with 0x42. Which tool can help me with this modification in the pcap file? Thanks
___________________________________________________________________________ Sent via: Wireshark-users mailing list <wireshark-users () wireshark org> Archives: http://www.wireshark.org/lists/wireshark-users Unsubscribe: https://wireshark.org/mailman/options/wireshark-users mailto:wireshark-users-request () wireshark org?subject=unsubscribe
Current thread:
- How to edit a specific byte in a pcap file ? Shashank Agarwal (Feb 26)
- Re: How to edit a specific byte in a pcap file ? Jaap Keuter (Feb 26)
- Re: How to edit a specific byte in a pcap file ? j.snelders (Feb 26)
- Re: How to edit a specific byte in a pcap file ? Abhijit Bare (Feb 27)
- Re: How to edit a specific byte in a pcap file ? j.snelders (Feb 28)
- Re: How to edit a specific byte in a pcap file ? j.snelders (Feb 28)
- Re: How to edit a specific byte in a pcap file ? j.snelders (Feb 26)
- Re: How to edit a specific byte in a pcap file ? Jaap Keuter (Feb 26)