{"id":13775123,"url":"https://github.com/rup0rt/pcapfix","last_synced_at":"2026-01-10T06:15:48.316Z","repository":{"id":2711541,"uuid":"3705857","full_name":"Rup0rt/pcapfix","owner":"Rup0rt","description":"repair corrupted pcap files","archived":false,"fork":false,"pushed_at":"2024-05-27T11:45:18.000Z","size":316,"stargazers_count":207,"open_issues_count":6,"forks_count":34,"subscribers_count":11,"default_branch":"master","last_synced_at":"2024-11-17T10:39:33.966Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"http://f00l.de/pcapfix/","language":"C","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"gpl-3.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/Rup0rt.png","metadata":{"files":{"readme":"README","changelog":"Changelog","contributing":null,"funding":null,"license":"COPYING","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2012-03-13T11:28:51.000Z","updated_at":"2024-11-14T02:22:24.000Z","dependencies_parsed_at":"2024-08-03T17:09:41.314Z","dependency_job_id":"97eed5b4-d35b-4d4d-b35f-347d13c9284b","html_url":"https://github.com/Rup0rt/pcapfix","commit_stats":{"total_commits":172,"total_committers":10,"mean_commits":17.2,"dds":"0.22093023255813948","last_synced_commit":"00b278a0f3c4a9f57759e2f9eca0d5110296768f"},"previous_names":[],"tags_count":11,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Rup0rt%2Fpcapfix","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Rup0rt%2Fpcapfix/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Rup0rt%2Fpcapfix/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Rup0rt%2Fpcapfix/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/Rup0rt","download_url":"https://codeload.github.com/Rup0rt/pcapfix/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":253533761,"owners_count":21923512,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-08-03T17:01:34.166Z","updated_at":"2026-01-10T06:15:48.252Z","avatar_url":"https://github.com/Rup0rt.png","language":"C","funding_links":[],"categories":["\u003ca id=\"f13469c9891173804423be4403b2c4ff\"\u003e\u003c/a\u003epcap"],"sub_categories":["\u003ca id=\"eb49514924c3f4bf2acf6f3a4436af13\"\u003e\u003c/a\u003e未分类"],"readme":"pcapfix v1.1.7 README\n*********************\n\nPcapfix is a tool to repair your damaged or corrupted pcap and pcapng files.\nIt is written in C and released under the GNU General Public License.\n\nTo fix your pcap files the tool first checks for an intact pcap global header\nand repairs it if there are some corrupted bytes. It there seems to be no\nglobal header at all, pcapfix adds a self-created one at the beginning of the\nfile. In a second step the tool tries to find pcap packet headers inside the\nfile, below the global header. It checks if the values are correct (or seem\nto be correct) and tries to repair a packet if there is something wrong. \n\nTo fix your pcapng files the tool loops through all packet headers that can\nbe found in the file. It checks for mandatory Section Header Block and\nInterface Description Block and creates them if missing. Pcapfix checks for\ncorrect block sizes and valid option fields. If something is wrong, invalid\nfields are repaired (if possible) or skipped and adjusted to finally get a\nproper pcapng file.\n\nPlease send any further wishes, feature requests or problems in compiling\nand execution to ruport@f00l.de. Additionally You may send me pcap/pcapng\nfiles that could not be repaired too in order to improve pcapfix and get\nyour file repaired.\n\nFor further information visit the pcapfix homepage at http://f00l.de/pcapfix/.\n\nUSAGE\n=====\n\n./pcapfix [OPTIONS] filename\nOPTIONS:        -d        , --deep-scan \t  \tDeep Scan (default = 0) (pcap only!)\n\t\t-s        , --soft-mode\t\t\tSoft mode (packet detection)\n                -n        , --pcapng \t  \t\tForce File Format to PCAPNG\n\t\t-o \u003cfile\u003e , --outfile \u003cfile\u003e\t\tSet output file name\n                -t \u003cnr\u003e\t  , --data-link-type \u003cnr\u003e\tData Link Type (default = 1)\n                -v        , --verbose \t  \t\tVerbose output (default = 0)\n\nOutput file name\n................\nIf you want to perform the reparation process on the input file without creating a\nseparate output file - e.g. in case you are out of space, you can use the -o option\nand give the same name as the input file.\n\nWARNING: This process is DANGEROUS and may destroy your data. You should only use\nthis option if you know what you are doing and accept the risk of losing the input\nfile.\n\nDeep Scan Option\n................\n\nIn classic pcap files, pcapfix will only scan the first 262144 bytes (maximum\npacket length) for a proper first packet. If you want to force packet detection\neven above this limit (e.g. because your file has been heavily destroyed) you\ncan use the deep scan option (-d).\n\nThis option is not necessary for pcapng files because the whole file is arranged\nin blocks that are 'unlimited' by default. In result pcapfix will always scan\nthe whole pcapng file for further blocks.\n\n\nSoft Mode\n.........\n\nThere are programs that breach some pcap conventions when writing files.\nIgnoring those rules do not break the pcap file but they make it difficult for\npcapfix to identify the packets in case of broken files.\n\nBy default pcapfix uses hard mode. If you encounter problems when repairing\nfiles, try to switch to soft mode (-s). Pcapfix will then try to find the\npackets in a more tolerant way.\n\n\nPCAPNG Format\n.............\n\nPcapfix will try to identify the file format to repair (pcap / pcapng) before\ndoing any further checks. If the header itself is corrupted, it will assume the\nformat to be classic pcap. To change this behaviour you can force the tool to\ndo a pcapng-repair by supplying -n (--pcapng) option.\n\n\nVerbosity\n.........\n\nYou can use multiple -v options to increase verbosity.\nAn verbosity of 2 will result in very much output data during package search.\n\n\nASCII-mode transfered Files (FTP)\n.................................\n\nPcapfix is able to repair classic pcap files that have been transfered in\nascii-mode via FTP. In those files a proper pcap structure will be created\nonly to make them readable by wireshark etc. The data inside the packets\n(and some pcap headers) might still be corrupted. To repair those packets\na deeper look inside the packet structure (e.g. checksum) will be necessary.\n\n\nData Link Types\n...............\n\nYou can make pcapfix change / select your data link type by supplying -t option.\nAlthough you may select a data link type number between 0 and 255, only the\nfollowing types are assigned: If the data link type field is corrupt, pcapfix\nwill select LINKTYPE_ETHERNET by default.\n\nSee http://www.tcpdump.org/linktypes.html for futher information.\n\nNUMBER\tLINK_TYPE\n\n0\tLINKTYPE_NULL\n1\tLINKTYPE_ETHERNET\n6\tLINKTYPE_TOKEN_RING\n7\tLINKTYPE_ARCNET_BSD\n8\tLINKTYPE_SLIP\n9\tLINKTYPE_PPP\n10\tLINKTYPE_FDDI\n50\tLINKTYPE_PPP_HDLC\n51\tLINKTYPE_PPP_ETHER\n100\tLINKTYPE_ATM_RFC1483\n101\tLINKTYPE_RAW\n104\tLINKTYPE_C_HDLC\n105\tLINKTYPE_IEEE802_11\n107\tLINKTYPE_FRELAY\n108\tLINKTYPE_LOOP\n113\tLINKTYPE_LINUX_SLL\n114\tLINKTYPE_LTALK\n117\tLINKTYPE_PFLOG\n119\tLINKTYPE_PRISM_HEADER\n122\tLINKTYPE_IP_OVER_FC\n123\tLINKTYPE_SUNATM\n127\tLINKTYPE_IEEE802_11_RADIO\n129\tLINKTYPE_ARCNET_LINUX\n138\tLINKTYPE_APPLE_IP_OVER_IEEE1394\n139\tLINKTYPE_MTP2_WITH_PHDR\n140\tLINKTYPE_MTP2\n141\tLINKTYPE_MTP3\n142\tLINKTYPE_SCCP\n143\tLINKTYPE_DOCSIS\n144\tLINKTYPE_LINUX_IRDA\n147-162\tLINKTYPE_USER0-LINKTYPE-USER15\n163\tLINKTYPE_IEEE802_11_RADIO_AVS\n166\tLINKTYPE_PPP_PPPD\n169\tLINKTYPE_GPRS_LLC\n177\tLINKTYPE_LINUX_LAPD\n187\tLINKTYPE_BLUETOOTH_HCI_H4\n189\tLINKTYPE_USB_LINUX\n192\tLINKTYPE_PPI\n195\tLINKTYPE_IEEE802_15_4\n196\tLINKTYPE_SITA\n197\tLINKTYPE_ERF\n201\tLINKTYPE_BLUETOOTH_HCI_H4_WITH_PHDR\n202\tLINKTYPE_AX25_KISS\n203\tLINKTYPE_LAPD\n204\tLINKTYPE_PPP_WITH_DIR\n205\tLINKTYPE_C_HDLC_WITH_DIR\n206\tLINKTYPE_FRELAY_WITH_DIR\n209\tLINKTYPE_IPMB_LINUX\n215\tLINKTYPE_IEEE802_15_4_NONASK_PHY\n220\tLINKTYPE_USB_LINUX_MMAPPED\n224\tLINKTYPE_FC_2\n225\tLINKTYPE_FC_2_WITH_FRAME_DELIMS\n226\tLINKTYPE_IPNET\n227\tLINKTYPE_CAN_SOCKETCAN\n228\tLINKTYPE_IPV4\n229\tLINKTYPE_IPV6\n230\tLINKTYPE_IEEE802_15_4_NOFCS\n231\tLINKTYPE_DBUS\n235\tLINKTYPE_DVB_CI\n236\tLINKTYPE_MUX27010\n237\tLINKTYPE_STANAG_5066_D_PDU\n239\tLINKTYPE_NFLOG\n240\tLINKTYPE_NETANALYZER\n241\tLINKTYPE_NETANALYZER_TRANSPARENT\n242\tLINKTYPE_IPOIB\n243\tLINKTYPE_MPEG_2_TS\n244\tLINKTYPE_NG40\n245\tLINKTYPE_NFC_LLCP\n\nCOPYRIGHT\n=========\n\nCopyright 2012-2021 Robert Krause\n\nPcapfix is free software: you can redistribute it and/or modify it under the\nterms of the GNU General Public License as published by the Free Software\nFoundation, either version 3 of the License, or any later version.\n\nPcapfix is distributed in the hope that it will be useful, but WITHOUT ANY\nWARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS\nFOR A PARTICULAR PURPOSE. See the GNU General Public License for more details.\n\nYou should have received a copy of the GNU General Public License along with\nPcapfix. If not, see http://www.gnu.org/licenses/.\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Frup0rt%2Fpcapfix","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Frup0rt%2Fpcapfix","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Frup0rt%2Fpcapfix/lists"}