Projects / pcapfix

pcapfix

pcapfix is a repair tool for corrupted pcap files. It checks for an intact pcap global header and repairs it if there are any corrupted bytes. If one is not present, one is created and added to the beginning of the file. It then tries to find pcap packet headers, and checks and repairs them.

Tags	pcap repair wireshark Networking
Licenses	GPL v3
Operating Systems	Linux Unix Windows Mac OS X
Implementation	C
Translations	English

Website

Download

Release tags

All releases

Recent releases

0.7.3

17 Jun 2013 00:32

Release Notes: This release adds snoop file detection and large file support, improves missing header recognition, and fixes bugs on hurd and kfreebsd architectures.

0.7.2

30 Mar 2013 18:17

Release Notes: This release compiles on Apple systems properly and fixes problems with installing man-pages.

0.7.1

03 Jan 2013 22:40

Release Notes: This release really fixes a file pointer exception on Windows 64-bit systems and updates the man page.

18 Oct 2012 21:24

Release Notes: This release adds support for swapped (big endian) pcap files and compiles on OpenBSD properly now. It fixes a file pointer exception on Windows 64-bit systems, a detection bug when a corrupted packet is larger than 65536 bytes, and the minimal packet limit to cope with WLAN traffic.

20 May 2012 21:00

Release Notes: This release adds a deep scan option (-d) to force packet detection inside the whole file, and repairs ascii-corruption pcap header (Unix->Windows). Packet header checks (usec) and last-packet-mismatch-correction were improved. This release fixes reading over EOF, fixing oversized packets and reparation of files where packets are entirely corrupted.