ethereal抓到的.cap格式的包有没有办法用哪个编辑它?

realinter

ethereal抓到的.cap格式的包有没有办法用哪个编辑它?

x11

试试这个，呵呵

$ apt-cache show netdude
Package: netdude
Priority: optional
Section: universe/x11
Installed-Size: 1700
Maintainer: Noèl Köthe <noel@debian.org>
Architecture: i386
Version: 0.3.3-2.1
Depends: libc6 (>= 2.3.4-1), libglib1.2 (>= 1.2.0), libgtk1.2 (>= 1.2.10-4), libpcap0.7, libx11-6, libxext6, libxi6, libnetdude
Suggests: tcpdump
Filename: pool/universe/n/netdude/netdude_0.3.3-2.1_i386.deb
Size: 484200
MD5sum: 3fa06161668adeebf08ff072e733873f
Description: NETwork DUmp data Displayer and Editor for tcpdump trace files
It is a GUI-based tool that allows you to make detailed changes to
packets in tcpdump trace files, in particular, it can currently do
the following:
  * Set the value of any field in IP, TCP and UDP packet headers.
  * Copy, move and delete packets in the trace file.
  * Fragment and reassemble IP packets.
  * Netdude constantly communicates with a tcpdump process to update
    the familiar tcpdump output that corresponds to the trace. This
    also means that any changes made to your local version of tcpdump
    are reflected in Netdude.
  * Plugin architecture: people can easily add plugins for specific
    tasks. The code comes with a plugin for checksum correction in IP,
    TCP and UDP, and a dummy plugin.
  * Through the plugin mechanism, Netdude provides a good facility for
    writing tcpdump trace file filters.
  .
  http://netdude.sourceforge.net/
Bugs: mailto:ubuntu-users@lists.ubuntu.com
Origin: Ubuntu