A Full Stack WYSIWYG Editor

for Network Packets

Edit L1 - L7 with just a few clicks

Free Downloads

Features

Simple Interface

Edit any packet at any layer from L1 to L7 with just a few mouse clicks. No hacking required. No need to look at Hex dumps.

Deep Understanding

WireEdit knows all mandatory/optional elements of a packet, their data types, encoding, inter-dependency, position offsets, value constraints, checksums, etc.

Just works

As you're editing WireEdit takes care of all the behind-the-scene details on the fly. No need to think about any of it.

2 mins intro

Frequently Asked Questions

What is WireEdit?

WireEdit is a desktop WYSIWYG packet editor. It lets you easily edit captured network packets in a simple point-and-click interface.

What protocols/layers are supported today?

Ethernet, IPv4, IPv6, UDP, TCP, SCTP, ARP, RARP, DHCP, DHCPv6, ICMP, ICMPv6, IGMP, DNS, LLDP, RSVP, FTP, NETBIOS, IMAP, POP3, RTCP, RTP, SSH, TELNET, NTP, LDAP, XMPP, CIFS/SMB v1 (original), iSCSI, SCSI, HTTP/1.1, OpenFlow 1.0-1.3.

What's new about this?

WireEdit deeply understands the syntax rules of all supported network stacks at all layers. So you can edit a packet without directly manipulating any of the data. WireEdit verifies on the fly all the changes you make and takes care of fields/layers encoding, offsets, inter-dependency, integrity, etc.

I don't see protocol X above. Can it be supported?

Yes. WireEdit can support any protocol/stack no matter how complex.

Can I still edit Ethernet frames data directly?

While in most cases WYSIWYG editing mode is sufficient, the raw data editing mode is supported as well. You can seamlessly switch between the two modes.

What file formats are supported?

WireEdit allows editing files in .pcap format. No .pcapng support yet.

What platforms are supported?

Windows 7+ and Ubuntu Desktop Linux. No Mac yet, sorry.

Are you competing with Wireshark?

No. WireEdit is a packet editor, not the analyzer. No real-time packet capture either.

What is your privacy policy?

No data of any kind is gathered, no connections to outside servers, except for a standard WINE repository in Ubuntu install.

Can I add support for network stack Y myself?

No but we’d be happy to talk about it.

Do you have a web demo?

Check wirefloss.com. It's much simpler than WireEdit, but should give you the idea.

Can I enter out-of-range value, overwrite a checksum or an offset field, do other fuzzing stuff?

Yes. You have to use special OVERWRITE mode. In this mode you can break the rules, but then you're on your own.

Can't you build a network tester on top of WireEdit?

Yep. Coming soon.

Is WireEdit free to use?

WireEdit is currently free but we may add premium features for enterprise users in the future.

We'd love to hear from you