pcapfix is a repair tool for corrupted pcap files. It checks for an intact pcap global header and repairs it if there are any corrupted bytes. If one is not present, one is created and added to the beginning of the file. It then tries to find pcap packet headers, and checks and repairs them.
| Tags | pcap repair wireshark Networking |
|---|---|
| Licenses | GPL v3 |
| Operating Systems | Linux Unix Windows Mac OS X |
| Implementation | C |
| Translations | English |
Recent releases


Release Notes: This release compiles on Apple systems properly and fixes problems with installing man-pages.


Release Notes: This release really fixes a file pointer exception on Windows 64-bit systems and updates the man page.


Release Notes: This release adds support for swapped (big endian) pcap files and compiles on OpenBSD properly now. It fixes a file pointer exception on Windows 64-bit systems, a detection bug when a corrupted packet is larger than 65536 bytes, and the minimal packet limit to cope with WLAN traffic.


Release Notes: This release adds a deep scan option (-d) to force packet detection inside the whole file, and repairs ascii-corruption pcap header (Unix->Windows). Packet header checks (usec) and last-packet-mismatch-correction were improved. This release fixes reading over EOF, fixing oversized packets and reparation of files where packets are entirely corrupted.


Release Notes: This release repairs files whose packets were not saved chronologically, detects and repairs overlapping packets, cut-off pcap files, and ASCII-mode transfered pcap files (pcap headers only), and adds a progress bar and a man page.