Questions tagged [tcpreplay]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0
votes
0answers
15 views

tcpreplay occupies 100% CPU

I am processing a pcap file of size 1GB using a tcpreplay command to check for any malicious traffic or not. The command takes more than 5 hours even though the system has plenty of cores and RAM. ...
0
votes
1answer
653 views

How can I tunnel multicast traffic?

I am trying to receive multicast on 1 machine, forward it to another machine, and then replay it on that machine. test_env: the machine which has access to the original multicast stream mcast_sender: ...
0
votes
1answer
924 views

Replaying pcap file for Snort

I currently have the following, presumably standard, setup: I have a physical server with Snort running. Snort logs into its log files as it should. Those files are tracked by barnyard2 which writes ...
0
votes
1answer
206 views

PCAP traffic frame length short

I'm trying to make traffic and capture it using pcap file. I get pcap file from CAIDA(caida.org) site. This pcap file too big and doesn't have ethernet header. So i splitted pcap file to small size(40 ...
2
votes
1answer
744 views

(Completely) randomize IP addresses in PCAP file

I have several PCAP files which contain network traffic. To perform some experiments for a network experiment, I need real data with completely randomized IP addresses. I am well aware about the ...
4
votes
1answer
3k views

Existing TCP Relay Solutions [closed]

I have a scenario which requires the use of a TCP Relay. Before I set out to write something custom, I wanted to see if anyone knows of existing software that can do this for me. I have 2 devices on ...
2
votes
2answers
784 views

tcpreplay throughput on eth0 well below (iperf confirmed) max

I'm trying to replay captured UDP multicast packets at a rate of a couple of hundreds of Mbps, but it maxes out at about 86 Mbps. (For some strange reason, at other times during the day it ...
2
votes
0answers
421 views

replay decrypted ssl traffic with tcpreplay

I have an pcap format from some https traffic from one of my web-servers. So I can use the key from my webserver to decrypt the traffic in wireshark. The problem I'm now facing is that I can't get an ...
1
vote
1answer
2k views

Freeradius server is not accepting accounting packets through tcpreplay

I am running a free radius server on system A. I am sending test accounting requests using radclient radclient -x systemA acct testing123 from system B. I can see that the radius server recieved these ...
0
votes
2answers
3k views

What is the right way to temporarily disable/enable PMTU Discovery on a Linux box?

I've a few pcaps that contain packets larger than standard ethernet MTU size of 1500B. I searched about this and found refs pointing towards Jumbo Frames. I now understand that since I'm on a GBE ...
1
vote
1answer
2k views

how I can Specifying tcpreplay speed

I am tring to Specify tcpreplay speed but I can't do it this is my detail of test: $tcpreplay -V tcpreplay version: 3.4.4 (build 2450) 1)$ tcpreplay -i %0 -p 100 -L 500 _udp_only.pcap Actual: 500 ...
6
votes
3answers
3k views

How to reproduce http traffic of a real site in another environment (e.g. VM)

There is a bug in my web application which I cannot reproduce. All the logs look ok or at least I cannot see anything unusual. But it happens. So I thought I could record all the traffic to/from my ...
4
votes
2answers
4k views

GUI tool for packet replay [closed]

Is there a freeware Windows/Linux GUI packet replay tool that has the advanced features of tcpreplay (http://tcpreplay.synfin.net/) or bittwist (http://bittwist.sourceforge.net)? I'm particularly ...
3
votes
1answer
3k views

Other PCAP network software other than TCPREPLAY?

I would like to find out if there are more other useful softwares with the same functions or more like TCPREPLAY which has the ability to "playback" PCAP files? Thanks for your suggestions!
5
votes
2answers
2k views

Tcpreplaying using VMware

This is more like a testbed setup question. I want to use VMware to debug some networking code in the linux kernel in the VM. My VM has two network interfaces. What I want to do is replay the capture ...