Questions tagged [tcpreplay]

A suite of tools to edit and replay captured network traffic. It allows to classify traffic as client or server, rewrite Layer 2, 3 and 4 headers and replay the traffic back onto the network and through network devices.

64 questions
0
votes
0 answers

DLT error when reading pcap file created with Scapy

I have created a pcap file using Scapy with some dummy values like pkt = IP(dst="116.73.117.174", src="239.50.50.12") / UDP(sport=10812, dport=42)/ Raw(load=b"Data")) pkt.show2() # Calculates checksum wrpcap('DATA.pcap', pkt, append=True) But when…
DrBug
  • 2,004
  • 2
  • 20
  • 21
0
votes
1 answer

Why can't capture rewritten packet

I'm using tcpdump and tcpreplay in ubuntu for capturing packet and resending(with rewriting and openwrt for ap mode in raspberry pi. My problem is that I cannot capture resent packet. This is my network : A ----> B(RPI) …
YoonPD
  • 11
  • 2
0
votes
1 answer

Why does sub-processing tcprewrite cause EOF error?

I'm trying to use execute tcprewrite in a python while loop with input but i keep getting EOF errors. I know that input can cause EOF error when the subprocessing for tcprewrite is executed. I've tried subprocessing other commands like touch and…
0
votes
1 answer

nmap used with tcpreplay questions

i am trying a SYN attack , in a controlled environment. My process: I started tcpdump process with filters to capture packets from one PC to another, only outgoing packets , I started a nmap process with -sS , I captured the outgoing SYN packets…
0
votes
1 answer

Prevent tcpreplay blocking Mininet Python API cmds

I need to execute multiple different commands to replay pcaps into my network. The first pcap is over 100 seconds, I need to play it and then immediately play other pcaps. My problem is, when I execute this line in my python code: h2.cmd('tcpreplay…
HCF3301
  • 508
  • 1
  • 4
  • 14
0
votes
1 answer

Fragmented UDP frame - only receiving one frame when sending with tcpreplay or scapy

I am replaying from a .pcap file that contains a single UDP datagram that has been fragmented into two frames. When using tcpreplay or scapy, both programs indicate they sent both frames, but I only receive 1 on the directly connected device. Any…
john
  • 85
  • 3
  • 10
0
votes
1 answer

How to replay a network trafic of PGM protocol using tcpreplay?

I want to multicast a network trafic to specific multicast destination IP address. In input pcap file PGM protocol packets are available. I'm performing following steps of tcpreplay to multicast a pcap file over a network- rewriting destination and…
ketan
  • 2,732
  • 11
  • 34
  • 80
0
votes
2 answers

I am trying to replay a pcap file that someone else captured for me (Im assuming they used tcpdump)

Linux command: tcpreplay -i replay -L 60000 -p 1000 20160627-ssmon01.pcap Output: sending out replay processing file: 20160627-080001-ssmon01-napa0.pcap Fatal Error: Error opening pcap file: unknown file format I do not understand why this is…
Jonathon Hill
  • 1,007
  • 4
  • 16
  • 23
0
votes
2 answers

TCPDump and TCPReplay to record and replay requests to application servers

Can TCPDump and TCPReplay be used to record(tcpdump) network traffic coming in to a application server/webserver/queue application etc., and then replayed using the dump on TCPReplay? Let's say I setup a apache server and use TCPDump to capture the…
tsar2512
  • 2,826
  • 3
  • 33
  • 61
0
votes
1 answer

tcpreplay error: Libpcap versions < 0.7.2 are not supported

while configuring tcpreplay by root@sdn1-PC:/home/cdcju/tcpreplay-4.1.1# ./configure i am getting error saying checking for libpcap version... configure: error: Libpcap versions < 0.7.2 are not supported Please upgrade to version 0.7.2 or…
0
votes
1 answer

running tcpreplay with docker and boot2docker

I'm working on a netflow logger and I want to setup some automated performance testing. I want to take my testing pcap and replay it to my program from within a docker image running under boot2docker. The networking side of this is stumping me. I…
skarface
  • 910
  • 6
  • 19
0
votes
1 answer

Why can't our packet sniffer receive all of the replayed TCP packets?

We are trying to replay a pcap file (smallFlows.pcap) over a 10 GbE connection using tcpreplay and capture all the packets, recording the source and destination ports/IP addresses. However, there is significant packet loss. At 3 Gbps, we are…
0
votes
1 answer

modifying http header/parameters in a pcap file

Is there any way to add/modify existing http header/request parameter in a pcap file? Any tools out there or do I need to assemble back to HTTP using Justniffer or similar tool and go from there?
vpram86
  • 5,860
  • 4
  • 28
  • 40
0
votes
1 answer

TCPReplay - Time Interval between loops

tcpreplay -i eth1 --pktlen -p3200 -l10 Sample.pcap Above it the command I am using, I need to replay packets at good speeds, but I also need it to take a break of about 20 seconds before next round
ezrasam
  • 3
  • 4
0
votes
1 answer

Pcap open an interface and inject packets

I need to write a program in C to read in pcap files and extract the packets and send them out . It's like a traffic replay. I know there's tcpreplay but I didn't see its C library, it seems to be only a command-line application. I know how to do it…
J Freebird
  • 3,664
  • 7
  • 46
  • 81