Aaron Turner
Aaron Turner
Basically, allow people to move the complex timing code from tcpreplay to tcprewrite which would improve performance.
From tomahawk 1.1: Replacing pcap IP Addresses (courtesy ICSA labs) Changed algorithm for assigning rewritten IP addresses. The new format is X.HID.N.N, where: - The first byte (X) can be...
If there is a flow which contains one or more packets which the actual len < capture len then we should optionally drop (not send) all packets related to that...
Sometimes, pcap files are missing the 3way handshake or 4way close for sessions, it would be nice to optionally insert the missing packets via tcprewrite. Will require some basic connection...
Rewrite TCP traffic so that it looks like multiple sessions even if played at the same time.
- Add the ability to modify packet data via regex(es) in tcprewrite - Should support pcre - Support (foo) and $1, etc so new data can include old - Limit...
Add support for adding/changing/stripping GRE headers for encaplusation
Unfortunately, this algorithm isn't that robust: http://tcpreplay.synfin.net/browser/branches/3.4/src/tcpedit/edit_packet.c#L125 and for large datasets, does not guarantee a 1:1 mapping of IP addresses. Really need to come up with a better solution so...