pcapfix for Debian ------------------ There are three network dumps at /usr/share/doc/pcapfix/examples. The test.dump is an original and perfect file that works fine. The file test_damaged.dump was damaged by an ASCII FTP operation. The last file, test_without_pcap_header.dump, hasn't the pcap header and can't be read by tcpdump or another program. You can use these files to test pcapfix. PS: you must use the "-t 1" option to repair the test_without_pcap_header.dump. -- Joao Eriberto Mota Filho Wed, 22 May 2013 16:47:18 -0300; Updated at Sun, 23 Feb 2014 20:01:00 -03:00.