tcpreplay
tcpreplay copied to clipboard
synfinatic
Pcap editing and replay tools for *NIX and Windows
Right now only DLT(L1) and L2 editing is done via plugins. Should add L3/L4 plugin support and switch to that for existing packet editing.
Being able to: - Process the L2 header - Get SRC/DST Mac - Get MAC length - Get L3 protocol type - Get pointer to L3 data - Get length...
Yes, there is already libnetdude, but it has a lot of dependencies and I find it's API overly complex. Also, libnetdude is merely a framework for writing packet editing plugins,...
Use the TCPivo method of dual memory buffers to prefetch packets from disk. Locking penalties are reduced by having two buffers which are at any given time a write buffer...
Would be nice to support Cisco's Q-in-Q (nested vlan tags) concept as described here: http://www.informit.com/articles/article.asp?p=101367&rl=1
Apparently Endace released a custom version of tcpreplay at http://www.endace.com/OpenSource_tcpreplay.htm. It would be nice if I natively supported DAG cards so they don't have to maintain their own tree.
Right now if you capture packets on a loopback or Jumbo Frame supported NIC, you can get packets > MTU for std ethernet. Would be nice to support IP fragmentation...
Someone once asked for the ablity to bridge their loopback to an ethernet device. Not sure why they wanted to do this, but I'm listing it here for completeness.
It will convert from 802.11 -> 802.3 ethernet, but the mac addresses won't change. Workaround is to use --dlt=enet and then to use the --enet-smac & dmac options in a...
Use tshark to generate XML decodes of packets and then use the rewrite engine to intelligently rewrite packet data based on user defined rules. I think embedding Lua is probably...
Metadata
Owner
Metadata
Pcap editing and replay tools for *NIX and Windows