Wireshark mailing list archives
How to edit a specific byte in a pcap file ?
From: Shashank Agarwal <agarwal_shashank () yahoo com>
Date: Thu, 25 Feb 2010 13:38:05 -0800 (PST)
Hi, How can I modify a specific byte using WireShark or any of its tools. I tried bit-twiste, tcprewrite, tcpreplay-edit, but to no avail. These tools provide predefined and limited editing capability like editing the IP address or TCP port or changing timestamp etc. E.g. I have the hex bytes from an ethernet broadcast packet - ff ff ff ff ff ff 00 0b 20 40 15 6d 19 02 40 ...... First six bytes is dest. address, next 6 bytes is source address, "19 02" is packet type and the 15th byte (0x40) contains a flag. I want to turn on the second bit in this 15th byte. Essentially replacing 0x40 with 0x42. Which tool can help me with this modification in the pcap file? Thanks
___________________________________________________________________________ Sent via: Wireshark-users mailing list <wireshark-users () wireshark org> Archives: http://www.wireshark.org/lists/wireshark-users Unsubscribe: https://wireshark.org/mailman/options/wireshark-users mailto:wireshark-users-request () wireshark org?subject=unsubscribe
Current thread:
- How to edit a specific byte in a pcap file ? Shashank Agarwal (Feb 26)
- Re: How to edit a specific byte in a pcap file ? Jaap Keuter (Feb 26)
- Re: How to edit a specific byte in a pcap file ? j.snelders (Feb 26)
- Re: How to edit a specific byte in a pcap file ? Abhijit Bare (Feb 27)
- Re: How to edit a specific byte in a pcap file ? j.snelders (Feb 28)
- Re: How to edit a specific byte in a pcap file ? j.snelders (Feb 28)
- Re: How to edit a specific byte in a pcap file ? j.snelders (Feb 26)
- Re: How to edit a specific byte in a pcap file ? Jaap Keuter (Feb 26)