Hey Roy, Doh. Another egg. Not sure why some people can build beta10... but yeah, definately a bug with tcpr.h. Should be easy enough to fix (expect beta11 out later tonight).
Anyways, I'm not even going to try to explain how beta7 works... code has changed so much since then it's not even worth it. Unfortunately right now, L2 rewriting isn't as nice as it should be- meaning there's nothing which changes the DLT in the pcap file to the new encapsulation type. If you're trying to change encapsulation (DLT) types, your best bet is prolly using v2.3.5. If I recall, it defaults to ethernet for rewriting, while in 3.x we keep the DLT type. Honestly, it's not something I do and I don't have any unit tests for it, so it tends to be broken/not work like people think it should/etc. Anyways, it's on my list of things to do as part of 3.0.RC1. Maybe I can slip it into beta11 tonight... I'll take a look and see. As for documentation for 3.x, it's on the website: http://tcpreplay.synfin.net/trac/wiki/manual Docs for 2.x are shipped with. Regards, Aaron On 8/7/06, Roy S. Rapoport <[EMAIL PROTECTED]> wrote: > tcprewrite information: > --- > tcprewrite version: 3.0.beta7 (build 1397:1399M) > Copyright 2001-2005 by Aaron Turner <[EMAIL PROTECTED]> > Cache file supported: 04 > Compiled against libnet: 1.1.2.1 > Compiled against libpcap: 0.9.4 > 64 bit packet counters: disabled > --- > > I tried briefly using beta10, but I could not compile it as it did not > seem to include tcpr.h and compiling barfed. > > I have a pcap file (in.pcap, enclosed) that contains a bunch of DNS > traffic; it all has some HDLC encapsulation information in it also. > > When I tcprewrite it thus: > > --- > DMAC=00:E0:80:50:F7:00 > SMAC=00:07:E9:D4:38:BF > > tcprewrite --infile in.pcap \ > --outfile out.pcap \ > --dmac $DMAC,$DMAC \ > --smac $SMAC,$SMAC > --- > > So I can actually send it from this system (RedHat Enterprise Linux 3), > what I end up with is out.pcap (also enclosed), which seems to only have > the HDLC information in it. Having read the man page and attempted to > read the docs, I fail to see how I can actually get the DNS payload into > the rewritten packet file. Could someone please point me at the relevant > FM so I can R it? > -- Aaron Turner http://synfin.net/ ------------------------------------------------------------------------- Using Tomcat but need to do more? Need to support web services, security? Get stuff done quickly with pre-integrated technology to make your job easier Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642 _______________________________________________ Tcpreplay-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/tcpreplay-users
