8 Other pcap tools available

8.1 Tools to capture network traffic or decode pcap files

• tcpdump
  http://www.tcpdump.org/
• ethereal
  http://www.ethereal.com/
• ettercap
  http://ettercap.sourceforge.net/

8.2 Tools to edit pcap files

• tcpslice
  Splits pcap files into smaller files
  http://www.tcpdump.org/
• mergecap
  Merges two pcap capture files into one
  http://www.ethreal.com/
• pcapmerge
  Merges two or more pcap capture files into one
  http://tcpreplay.sourceforge.net/
• editcap
  Converts capture file formats (pcap, snoop, etc)
  http://www.ethreal.com/
• netdude
  GTK based pcap capture file editor. Allows editing most anything in the packet.
  http://netdude.sourceforge.net/

8.3 Other useful tools

• capinfo
  Prints statistics and basic information about a pcap file
  http://tcpreplay.sourceforge.net/
• text2pcap
  Generates a pcap capture file from a hex dump
  http://www.ethreal.com/
• tcpflow
  Extracts and reassembles the data portion on a per-flow basis on live traffic or pcap capture files
  http://www.circlemud.org/ jelson/software/tcpflow/