A suite of tools to edit and replay captured network traffic. It allows to classify traffic as client or server, rewrite Layer 2, 3 and 4 headers and replay the traffic back onto the network and through network devices.
Questions tagged [tcpreplay]
64 questions
0
votes
0 answers
DLT error when reading pcap file created with Scapy
I have created a pcap file using Scapy with some dummy values like
pkt = IP(dst="116.73.117.174", src="239.50.50.12") / UDP(sport=10812, dport=42)/ Raw(load=b"Data"))
pkt.show2() # Calculates checksum
wrpcap('DATA.pcap', pkt, append=True)
But when…

DrBug
- 2,004
- 2
- 20
- 21
0
votes
1 answer
Why can't capture rewritten packet
I'm using tcpdump and tcpreplay in ubuntu for capturing packet and resending(with rewriting and openwrt for ap mode in raspberry pi.
My problem is that I cannot capture resent packet.
This is my network :
A ----> B(RPI) …

YoonPD
- 11
- 2
0
votes
1 answer
Why does sub-processing tcprewrite cause EOF error?
I'm trying to use execute tcprewrite in a python while loop with input but i keep getting EOF errors.
I know that input can cause EOF error when the subprocessing for tcprewrite is executed.
I've tried subprocessing other commands like touch and…

Ken Tong
- 1
0
votes
1 answer
nmap used with tcpreplay questions
i am trying a SYN attack , in a controlled environment.
My process:
I started tcpdump process with filters to capture packets from one PC to another, only outgoing packets , I started a nmap process with -sS , I captured the outgoing SYN packets…

random_numbers
- 33
- 10
0
votes
1 answer
Prevent tcpreplay blocking Mininet Python API cmds
I need to execute multiple different commands to replay pcaps into my network.
The first pcap is over 100 seconds, I need to play it and then immediately play other pcaps.
My problem is, when I execute this line in my python code:
h2.cmd('tcpreplay…

HCF3301
- 508
- 1
- 4
- 14
0
votes
1 answer
Fragmented UDP frame - only receiving one frame when sending with tcpreplay or scapy
I am replaying from a .pcap file that contains a single UDP datagram that has been fragmented into two frames. When using tcpreplay or scapy, both programs indicate they sent both frames, but I only receive 1 on the directly connected device. Any…

john
- 85
- 3
- 10
0
votes
1 answer
How to replay a network trafic of PGM protocol using tcpreplay?
I want to multicast a network trafic to specific multicast destination IP address. In input pcap file PGM protocol packets are available.
I'm performing following steps of tcpreplay to multicast a pcap file over a network-
rewriting destination and…

ketan
- 2,732
- 11
- 34
- 80
0
votes
2 answers
I am trying to replay a pcap file that someone else captured for me (Im assuming they used tcpdump)
Linux command:
tcpreplay -i replay -L 60000 -p 1000 20160627-ssmon01.pcap
Output:
sending out replay
processing file: 20160627-080001-ssmon01-napa0.pcap
Fatal Error: Error opening pcap file: unknown file format
I do not understand why this is…

Jonathon Hill
- 1,007
- 4
- 16
- 23
0
votes
2 answers
TCPDump and TCPReplay to record and replay requests to application servers
Can TCPDump and TCPReplay be used to record(tcpdump) network traffic coming in to a application server/webserver/queue application etc., and then replayed using the dump on TCPReplay?
Let's say I setup a apache server and use TCPDump to capture the…

tsar2512
- 2,826
- 3
- 33
- 61
0
votes
1 answer
tcpreplay error: Libpcap versions < 0.7.2 are not supported
while configuring tcpreplay by
root@sdn1-PC:/home/cdcju/tcpreplay-4.1.1# ./configure
i am getting error saying
checking for libpcap version... configure: error: Libpcap versions < 0.7.2 are not supported
Please upgrade to version 0.7.2 or…

Om Prakash Kumar
- 61
- 2
- 9
0
votes
1 answer
running tcpreplay with docker and boot2docker
I'm working on a netflow logger and I want to setup some automated performance testing. I want to take my testing pcap and replay it to my program from within a docker image running under boot2docker. The networking side of this is stumping me.
I…

skarface
- 910
- 6
- 19
0
votes
1 answer
Why can't our packet sniffer receive all of the replayed TCP packets?
We are trying to replay a pcap file (smallFlows.pcap) over a 10 GbE connection using tcpreplay and capture all the packets, recording the source and destination ports/IP addresses. However, there is significant packet loss. At 3 Gbps, we are…

user2471905
- 27
- 5
0
votes
1 answer
modifying http header/parameters in a pcap file
Is there any way to add/modify existing http header/request parameter in a pcap file? Any tools out there or do I need to assemble back to HTTP using Justniffer or similar tool and go from there?

vpram86
- 5,860
- 4
- 28
- 40
0
votes
1 answer
TCPReplay - Time Interval between loops
tcpreplay -i eth1 --pktlen -p3200 -l10 Sample.pcap
Above it the command I am using, I need to replay packets at good speeds, but I also need it to take a break of about 20 seconds before next round

ezrasam
- 3
- 4
0
votes
1 answer
Pcap open an interface and inject packets
I need to write a program in C to read in pcap files and extract the packets and send them out . It's like a traffic replay. I know there's tcpreplay but I didn't see its C library, it seems to be only a command-line application.
I know how to do it…

J Freebird
- 3,664
- 7
- 46
- 81