pcapfix is a repair tool for corrupted pcap files. It checks for an intact pcap global header and repairs it if there are any corrupted bytes. If one is not present, one is created and added to the beginning of the file. It then tries to find pcap packet headers, and checks and repairs them.
|Tags||pcap repair wireshark Networking|
|Operating Systems||Linux Unix Windows Mac OS X|
Release Notes: This release adds snoop file detection and large file support, improves missing header recognition, and fixes bugs on hurd and kfreebsd architectures.
Release Notes: This release compiles on Apple systems properly and fixes problems with installing man-pages.
Release Notes: This release really fixes a file pointer exception on Windows 64-bit systems and updates the man page.
Release Notes: This release adds support for swapped (big endian) pcap files and compiles on OpenBSD properly now. It fixes a file pointer exception on Windows 64-bit systems, a detection bug when a corrupted packet is larger than 65536 bytes, and the minimal packet limit to cope with WLAN traffic.
Release Notes: This release adds a deep scan option (-d) to force packet detection inside the whole file, and repairs ascii-corruption pcap header (Unix->Windows). Packet header checks (usec) and last-packet-mismatch-correction were improved. This release fixes reading over EOF, fixing oversized packets and reparation of files where packets are entirely corrupted.