Next:
Contents
Contents
Tcpreplay 3.x Manual
Aaron Turner
http://tcpreplay.synfin.net/
Contents
1
Before You Start
1
Overview
1
.
1
Corrections and additions to the manual
1
.
2
Getting Help
1
.
3
What tools come with tcpreplay?
1
.
4
What tools no longer come with tcpreplay?
2
Getting Tcpreplay working on your system
2
.
1
How can I get tcpreplay's source?
2
.
2
OS X and Debian users
2
.
3
What requirements does tcpreplay have?
2
.
4
How do I compile tcpreplay?
2
Basics
3
Basic Tcpreplay Usage
3
.
1
Replaying the traffic
3
.
2
Replaying at different speeds
3
.
3
Replaying the same file over and over again
3
.
4
Using Configuration Files
3
Advanced Usage
4
Output: Interfaces, Packets & Files
4
.
1
Replaying on multiple interfaces
4
.
2
Selectively sending or dropping packets
4
.
3
Replaying only a few packets
4
.
4
Skipping the first bytes in a pcap file
4
.
5
Replaying packets which are bigger then the MTU
4
.
6
Writing packets to a file
4
.
7
Extracting Application Data (Layer 7)
4
.
8
Replaying Live Traffic
4
.
9
Replaying Packet Capture Formats Other Than Libpcap
4
.
10
Replaying Client Traffic to a Server
4
.
11
Decoding Packets
5
Packet Editing
5
.
1
Rewriting MAC addresses
5
.
2
Randomizing IP addresses
5
.
3
Replaying (de)truncated packets
5
.
4
Rewriting Layer 2 with -2
5
.
5
Rewriting DLT_LINUX_SLL (Linux Cooked Socket) captures
5
.
6
Rewriting IP Addresses (pseudo-NAT)
5
.
7
Advanced pseudo-NAT
5
.
8
IP Endpoints
5
.
9
Unifying Dual-Outputs
6
Tcpprep Usage
6
.
1
What is tcpprep?
6
.
2
What are these 'modes' tcpprep has?
6
.
3
Splitting traffic based upon IP address
6
.
4
Auto Mode
6
.
5
Selectively sending/dropping packets
6
.
6
Using tcpprep cache files with tcpreplay
6
.
7
Commenting tcpprep cache files
7
Flowreplay Usage
7
.
1
How flowreplay works
7
.
2
Running flowreplay
8
Tuning OS's for high performance
8
.
1
Linux 2.4.x
8
.
2
*BSD
9
Understanding Common Error and Warning Messages
9
.
1
Can't open eth0: libnet_select_device(): Can't find interface eth0
9
.
2
Can't open lo: libnet_select_device(): Can't find interface lo
9
.
3
Can't open eth0: UID != 0
9
.
4
100000 write attempts failed from full buffers and were repeated
9
.
5
Invalid mac address: 00:00:00:00:00:00
9
.
6
Unable to process test.cache: cache file version missmatch
9
.
7
Skipping SLL loopback packet.
9
.
8
Packet length (8892) is greater then MTU; skipping packet.
9
.
9
Why is tcpreplay not sending all the packets?
10
Required Libraries and Tools
10
.
1
Libpcap
10
.
2
Libnet
10
.
3
Libpcapnav
10
.
4
Tcpdump
4
Other Resources
11
Other pcap tools available
11
.
1
Tools to capture network traffic or decode pcap files
11
.
2
Tools to edit pcap files
11
.
3
Other useful tools
Aaron Turner 2005-02-27