Questions tagged [tcpreplay]

A suite of tools to edit and replay captured network traffic. It allows to classify traffic as client or server, rewrite Layer 2, 3 and 4 headers and replay the traffic back onto the network and through network devices.

64 questions
1
vote
1 answer

Can't use CAIDA Dataset with tcpreplay to simulate network traffic in network

I have a server and I need to simulate real network traffic. I've been asked to do this using a CAIDA Dataset. I have downloaded the public Dataset which can be found here: CAIDA Public Dataset I also need to rewrite the source ip address in the…
1
vote
1 answer

How to install TCPReplay on windows 7, 64-bit

I am trying to use scapy's sendpfast method. But it requires TCPReplay installed on machine. Without TCPreplay it is throwing an error ERROR: while trying to exec [None]: argument of type 'NoneType' is not iterable Any ideas how to install…
Kashif Ahmad
  • 426
  • 3
  • 8
  • 22
1
vote
1 answer

sendpfast ERROR: while trying to exec [None]: argument of type 'NoneType' is not iterable

I am trying to replay a file using scapy's sendpfast function. But it throws an error. a = rdpcap("U:\\Tests\\pcaps\\test1000.pcap") sendpfast(a) ERROR: while trying to exec [None]: argument of type 'NoneType' is not iterable I am using windows 7…
Kashif Ahmad
  • 426
  • 3
  • 8
  • 22
1
vote
1 answer

How to modify the timestamp range of a .pcap file?

Problem I need to modify a .pcap file captured over a timespan of 5 minutes such that it simulates a .pcap file captured over a timespan of 20 minutes. The problem is that I don't know how to do this. Example To illustrate the problem, suppose I…
Thijs van Ede
  • 78
  • 1
  • 8
1
vote
1 answer

Confusion with POpen/stdin/scapy/tcpreplay

I'm trying to emulate the code here: Scapy and tcpreplay: bypass temporary file for performance When I try running that code, Python errors on this line: f = subprocess.Popen(argv, stdin=subprocess.PIPE) The error says Failed: Error opening…
aczh
  • 61
  • 1
  • 3
1
vote
1 answer

Tcpreplay parameter and CPU usage

I have created a UDP file using Scapy and I'm using tcpreplay to send the packet. I've faced two weird issues: The number of packets sent is not identical to the (--pps) parameter. Not sure if the answer is…
Tom
  • 13
  • 4
1
vote
1 answer

tcpreplay, different packet number with pcap file

I have a pcap file, captured with Wireshark,with 2690 packets I use tcpreplay to replay it on an interface, but the problem is that the number of Attempted packets in tcpreplay is different(less) with number of packets showing in wireshark…
JackB
  • 43
  • 1
  • 5
1
vote
1 answer

Replay traffic captured using tcpreplay

We have PCAP dump which has TCP packets. These packets are captured on a network interface. Now i want to replay these packets from my "Server A" ----> "Server B". The server "A" and server "B" are in local LAN network and there is a switch in…
Abhinay
  • 75
  • 12
1
vote
1 answer

Wireshark C arrays

I have just downloaded the latest update of wireshark (version 2.0.1). This new version has an annoying feature, when I follow a specific stream and save it as C arrays, it inserts a comment line in the first row of the file: /* Packet 8 */ This…
niceGuy
  • 311
  • 3
  • 12
1
vote
0 answers

python - sending hex string/packet to interface without IP

I have a Centos machine that has two network interfaces, and I need to sent a hex String and force it to one of the interfaces. I found the socket.bind and socket.connect methods, but the thing is - the destination I want to send the hex string to…
Ofek Agmon
  • 5,040
  • 14
  • 57
  • 101
1
vote
1 answer

Unable to do tcpreplay of edited wireshark file

what I did - Got a wireshark capture of web traffic. Edited the capture file to remove one GET request. (removed that line using editcap) Saved the edited file (from step 2) Did a tcpreplay of this file. When I do this, I get an error: Fatal…
Omi
  • 976
  • 2
  • 20
  • 35
1
vote
1 answer

pcap_inject on a disconnected interface

I'm trying to implement replaying packets stored in .pcap files using libpcap. The process is very simple: I would open the pcap file with 'pcap_open_offline' then pass packets to the device opened with pcap_open_live, and send them with…
icdevppl
  • 175
  • 2
  • 10
1
vote
1 answer

How does send() work in omnet++

Does the send() in omnet++ set the source address of the packet to the current host address? Why am I asking? because I'm trying to code a class for a malicious host "Eve" that performs a replay attack. void MalAODVRouter::handleMessage(cMessage…
Shaikha TheGreen
  • 115
  • 2
  • 12
1
vote
1 answer

tcpreplay installation failed, libpcap/collect

I could not install tcpreplay on RHEL 6.6 When I try to run ./configure I got following error checking for inet_addr... yes checking for libpcap... no configure: error: libpcap not found [root@tcpreplay-4.1.0]# ldconfig -p | grep libpca …
1
vote
1 answer

tcprewrite - truncated packet error

i use tcprewrite to rewrite my raw pcap files (change MAC address and then change the IP) from CAIDA dataset. I came across this problem. command use as follows: sudo tcprewrite --infile=xxx.pcap --dlt=enet --outfile=yyy.pcap --enet-dmac=00:00:00:03…
user3085445
  • 95
  • 2
  • 10