Tell me more ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.
up vote 1 down vote favorite

I would like to find out if there are more other useful softwares with the same functions or more like TCPREPLAY which has the ability to "playback" PCAP files? Thanks for your suggestions!

share|improve this question

1 Answer

up vote 2 down vote accepted

Just about any program that uses the libpcap library can replay pcap files, assuming by "replay" you mean "re-use saved network traffic" rather than "put that traffic back on the network".

For example, tcpdump, wireshark, ngrep, tcpflow, and probably dozens of other similar programs can work off both live network traffic, and off saved network traffic that then gets replayed within the application.

If, on the other hand, you're looking at injecting the network traffic back onto the network, then your options are much more limited. There's PReplay for Windows, tcpreplay and capedit for Linux/UNIX, and then a bunch of specialized tools for replaying specific types of traffic, usually related to network intrusion (such as aireplay to aid in WEP cracking).

share|improve this answer
Great answer and explanation! Thanks! – VMNoob Aug 31 '10 at 7:57
I like to add Bit-Twist as another alternative to inject network traffic back onto the network (OSX, Linux, Windows). – Wimmel Jun 25 '12 at 15:16

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.