pcapfix

repairs corrupted packet captures

TLDR

Fix corrupted pcap
$ pcapfix [corrupted.pcap]
Fix and save to new file
$ pcapfix -o [fixed.pcap] [corrupted.pcap]
Verbose output
$ pcapfix -v [corrupted.pcap]
Deep scan mode
$ pcapfix -d [corrupted.pcap]

SYNOPSIS

pcapfix [options] file

DESCRIPTION

pcapfix repairs corrupted packet captures. Fixes pcap and pcapng files.The tool recovers network captures. Handles truncation and corruption.

PARAMETERS

FILE

Corrupted pcap file.
-o OUTPUT
Output file.
-v
Verbose mode.
-d
Deep scan.
-n
Fix pcapng files.

INSTALL

sudo apt install pcapfix
nix profile install nixpkgs#pcapfix

CAVEATS

May not recover all data. Backup originals. Supports pcap and pcapng.

HISTORY

pcapfix was created for recovering corrupted packet capture files.

SEE ALSO

tcpdump(1), wireshark(1), editcap(1)