Subsections

- - Other pcap tools available
    - Tools to capture network traffic or decode pcap files
    - Tools to edit pcap files
    - Other useful tools

# Other Resources

# Other pcap tools available

## Tools to capture network traffic or decode pcap files

- tcpdump
  http://www.tcpdump.org/
- ethereal
  http://www.ethereal.com/
- ettercap
  http://ettercap.sourceforge.net/

## Tools to edit pcap files

- tcpslice
  Splits pcap files into smaller files
  http://www.tcpdump.org/
- mergecap
  Merges two pcap capture files into one
  http://www.ethereal.com/
- editcap
  Converts capture file formats (pcap, snoop, etc)
  http://www.ethereal.com/
- netdude
  GTK based pcap capture file editor. Allows editing most anything in the packet.
  http://netdude.sourceforge.net/

## Other useful tools

- capinfo
  Prints statistics and basic information about a pcap file
  http://www.ethereal.com/
- text2pcap
  Generates a pcap capture file from a hex dump
  http://www.ethereal.com/
- tcpflow
  Extracts and reassembles the data portion on a per-flow basis on live traffic or pcap capture files
  http://www.circlemud.org/ jelson/software/tcpflow/