On Tue, Aug 08, 2006 at 09:58:43AM -0700, Aaron Turner wrote:
> > Things are much less frustrating and are actually working now -- thanks!
> >
> > (I still don't quite know how to use --dlink to change to ethernet, but
> > I'll browse the docs and see if I can figure it out)
>
> Depends on what you want to do. With HDLC there really isn't a real
> layer two header to edit. Opening up the file in Ethereal/Wireshark
> should clear up what I mean. If you wanted to change the packets from
> HDLC to say Ethernet, then you would specify the new ethernet header
> with --dlink and specify the new DLT type with --dlt (added in
> beta11).
>
> The manual has an example:
> http://tcpreplay.synfin.net/trac/wiki/tcprewrite#HandlingnonEthernetDLTs
>
> If there is something else you want to do, let me know and I'll see
> what I can do.
That's pretty much what I want to do, but the example let me down :)
I used
tcprewrite --dlink=00,02,03,04,05,06,00,1A,2B,3C,4D,5E,6F,08,00 --dlt=1 \
--infile foo.pcap --outfile foo.pcap.dlt
This definitely seemed to give me a hint -- I've been able to create the
ethernet header (by simply stealing it from what ethernet showed). The
problem I now have is that in addition to redoing the MAC addresses, I
want to rewrite the IP addresses -- and using --endpoints tells me I have
to use cachefile; when I create the cachefile via
tcpprep -i infile.pcap -o infile.cache -p
and then run tcprewrite with
tcprewrite --dlink 00,e0,80,50,f7,00,00,07,e9,d4,38,bf,08,00 \
--dlt 1 \
--infile infile.pcap --endpoints 64.125.37.1:64.125.37.25
--outfile outfile.pcap \
--cachefile infile.cache
I get:
Error rewriting packets: Unsupported protocol for checksum: 5
-roy
-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________
Tcpreplay-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/tcpreplay-users
