How To Install pcapdiff on Fedora 36

Introduction

In this tutorial we learn how to install pcapdiff on Fedora 36.

What is pcapdiff

Pcapdiff is a tool developed by the EFF to compare two packet captures and identify potentially forged, dropped, or mangled packets. Two technically- inclined friends can set up packet captures (e.g. tcpdump or Wireshark) on their own computers and produce network traffic between their two computers over the Internet. Later, they can run pcapdiff on the two packet capture files to identify suspicious packets for further investigation. See Detecting packet injection and EFF’s Test Your ISP Project for more background.

We can use yum or dnf to install pcapdiff on Fedora 36. In this tutorial we discuss both methods but you only need to choose one of method to install pcapdiff.

Install pcapdiff on Fedora 36 Using dnf

Update yum database with dnf using the following command.

sudo dnf makecache --refresh

After updating yum database, We can install pcapdiff using dnf by running the following command:

sudo dnf -y install pcapdiff

Install pcapdiff on Fedora 36 Using yum

Update yum database with yum using the following command.

sudo yum makecache --refresh

After updating yum database, We can install pcapdiff using yum by running the following command:

sudo yum -y install pcapdiff

How To Uninstall pcapdiff on Fedora 36

To uninstall only the pcapdiff package we can use the following command:

sudo dnf remove pcapdiff

pcapdiff Package Contents on Fedora 36

/usr/bin/pcapdiff
/usr/bin/printpackets
/usr/share/doc/pcapdiff
/usr/share/doc/pcapdiff/COPYING.2
/usr/share/doc/pcapdiff/COPYING.3
/usr/share/doc/pcapdiff/README
/usr/share/pcapdiff
/usr/share/pcapdiff/pcapdiff.py
/usr/share/pcapdiff/pcapdiff_helper.py
/usr/share/pcapdiff/printpackets.py

References

• pcapdiff website

Summary

In this tutorial we learn how to install pcapdiff on Fedora 36 using yum and [dnf]((/fedora/36/dnf/).