A suite of tools to edit and replay captured network traffic. It allows to classify traffic as client or server, rewrite Layer 2, 3 and 4 headers and replay the traffic back onto the network and through network devices.
Questions tagged [tcpreplay]
64 questions
1
vote
1 answer
Can't use CAIDA Dataset with tcpreplay to simulate network traffic in network
I have a server and I need to simulate real network traffic. I've been asked to do this using a CAIDA Dataset. I have downloaded the public Dataset which can be found here:
CAIDA Public Dataset
I also need to rewrite the source ip address in the…

Giannis Pappas
- 137
- 10
1
vote
1 answer
How to install TCPReplay on windows 7, 64-bit
I am trying to use scapy's sendpfast method. But it requires TCPReplay installed on machine. Without TCPreplay it is throwing an error
ERROR: while trying to exec [None]: argument of type 'NoneType' is not iterable
Any ideas how to install…

Kashif Ahmad
- 426
- 3
- 8
- 22
1
vote
1 answer
sendpfast ERROR: while trying to exec [None]: argument of type 'NoneType' is not iterable
I am trying to replay a file using scapy's sendpfast function. But it throws an error.
a = rdpcap("U:\\Tests\\pcaps\\test1000.pcap")
sendpfast(a)
ERROR: while trying to exec [None]: argument of type 'NoneType' is not iterable
I am using windows 7…

Kashif Ahmad
- 426
- 3
- 8
- 22
1
vote
1 answer
How to modify the timestamp range of a .pcap file?
Problem
I need to modify a .pcap file captured over a timespan of 5 minutes such that it simulates a .pcap file captured over a timespan of 20 minutes. The problem is that I don't know how to do this.
Example
To illustrate the problem, suppose I…

Thijs van Ede
- 78
- 1
- 8
1
vote
1 answer
Confusion with POpen/stdin/scapy/tcpreplay
I'm trying to emulate the code here: Scapy and tcpreplay: bypass temporary file for performance
When I try running that code, Python errors on this line:
f = subprocess.Popen(argv, stdin=subprocess.PIPE)
The error says
Failed: Error opening…

aczh
- 61
- 1
- 3
1
vote
1 answer
Tcpreplay parameter and CPU usage
I have created a UDP file using Scapy and I'm using tcpreplay to send the packet. I've faced two weird issues:
The number of packets sent is not identical to the (--pps) parameter. Not sure if the answer is…

Tom
- 13
- 4
1
vote
1 answer
tcpreplay, different packet number with pcap file
I have a pcap file, captured with Wireshark,with 2690 packets
I use tcpreplay to replay it on an interface, but the problem is that the number of Attempted packets in tcpreplay is different(less) with number of packets showing in wireshark…

JackB
- 43
- 1
- 5
1
vote
1 answer
Replay traffic captured using tcpreplay
We have PCAP dump which has TCP packets. These packets are captured on a network interface.
Now i want to replay these packets from my "Server A" ----> "Server B". The server "A" and server "B" are in local LAN network and there is a switch in…

Abhinay
- 75
- 12
1
vote
1 answer
Wireshark C arrays
I have just downloaded the latest update of wireshark (version 2.0.1).
This new version has an annoying feature, when I follow a specific stream and save it as C arrays, it inserts a comment line in the first row of the file:
/* Packet 8 */
This…

niceGuy
- 311
- 3
- 12
1
vote
0 answers
python - sending hex string/packet to interface without IP
I have a Centos machine that has two network interfaces, and I need to sent a hex String and force it to one of the interfaces.
I found the socket.bind and socket.connect methods, but the thing is - the destination I want to send the hex string to…

Ofek Agmon
- 5,040
- 14
- 57
- 101
1
vote
1 answer
Unable to do tcpreplay of edited wireshark file
what I did -
Got a wireshark capture of web traffic.
Edited the capture file to remove one GET request. (removed that line using editcap)
Saved the edited file (from step 2)
Did a tcpreplay of this file.
When I do this, I get an error: Fatal…

Omi
- 976
- 2
- 20
- 35
1
vote
1 answer
pcap_inject on a disconnected interface
I'm trying to implement replaying packets stored in .pcap files using libpcap.
The process is very simple: I would open the pcap file with 'pcap_open_offline' then pass packets to the device opened with pcap_open_live, and send them with…

icdevppl
- 175
- 2
- 10
1
vote
1 answer
How does send() work in omnet++
Does the send() in omnet++ set the source address of the packet to the current host address?
Why am I asking? because I'm trying to code a class for a malicious host "Eve" that performs a replay attack.
void MalAODVRouter::handleMessage(cMessage…

Shaikha TheGreen
- 115
- 2
- 12
1
vote
1 answer
tcpreplay installation failed, libpcap/collect
I could not install tcpreplay on RHEL 6.6
When I try to run ./configure I got following error
checking for inet_addr... yes
checking for libpcap... no
configure: error: libpcap not found
[root@tcpreplay-4.1.0]# ldconfig -p | grep libpca
…

Murat Suluhan
- 33
- 6
1
vote
1 answer
tcprewrite - truncated packet error
i use tcprewrite to rewrite my raw pcap files (change MAC address and then change the IP) from CAIDA dataset. I came across this problem.
command use as follows:
sudo tcprewrite --infile=xxx.pcap --dlt=enet --outfile=yyy.pcap --enet-dmac=00:00:00:03…

user3085445
- 95
- 2
- 10