all options
jessie  ] [  stretch  ] [  buster  ] [  sid  ]
[ Source: pcapfix  ]

Package: pcapfix (1.1.0-1)

Links for pcapfix

Screenshot

Debian Resources:

Download Source Package pcapfix:

Maintainer:

External Resources:

Similar packages:

repairs broken pcap and pcapng files

libpcap (Packet CAPture) provides a portable framework for low-level network monitoring. Network dumps based on libpcap can be made by tcpdump, wireshark and other tools. Sometimes those dumps can get corrupted by several reasons. Examples of this are a copy from Linux to Windows with a conversion to DOS/ Windows text file line ending (CR-LF) or a transfer over FTP in ASCII mode instead of BINARY mode.

pcapfix tries to repair your broken pcap files, fixing the global header and recovering the packets by searching and guessing the packet headers.

pcapfix will first step through the packets top down until it recognizes a corrupted one by using plausibility checks. After that the tool will brute force further pcap packet headers by reading the file byte by byte. If another proper packet is found, pcapfix restores the data in between by adding a well-formed pcap packet header.

The PCAP Next Generation Dump File Format (or pcapng for short) is an attempt to overcome the limitations of the currently widely used (but limited) libpcap format. Since 1.0.0 version, pcapfix works with pcapng format too.

Other Packages Related to pcapfix

  • depends
  • recommends
  • suggests
  • enhances

Download pcapfix

Download for all available architectures
Architecture Package Size Installed Size Files
amd64 45.7 kB106.0 kB [list of files]
arm64 43.6 kB106.0 kB [list of files]
armel 45.5 kB105.0 kB [list of files]
armhf 44.2 kB101.0 kB [list of files]
i386 46.7 kB74.0 kB [list of files]
mips 45.5 kB114.0 kB [list of files]
mipsel 45.7 kB114.0 kB [list of files]
powerpc 45.3 kB105.0 kB [list of files]
ppc64el 44.4 kB70.0 kB [list of files]
s390x 44.4 kB110.0 kB [list of files]