On 3/19/07, n1i3n130 n1i3n130 <[EMAIL PROTECTED]> wrote: > Hello – I have a tcpdump file captured with these options: -tt –n –l –S tcp > Now I would like to regenerate this traffic. > So I choose to run tcpreplay for that. The tcpreplay is recognizing cache > files. So I use tcpprep to convert my captured file to cache file. > My question may sound simple: > First how to run tcpprep to convert my tcpdump file with these options to > create a cache file for tcpreplay? > And how to regenerate the traffic using tcpreplay? > > Thank you > > Kind Regards
tcpreplay replays pcap files, just like those created by tcpdump. No modification/changes are necessary. Now, if you want to split the traffic in the pcap file between two interfaces (say you want to test an IPS and send the C2S traffic from one interface and the S2C traffic out the other) then you will need to use tcpprep to create the cache file. All this is explained on the tcpreplay manual: http://tcpreplay.synfin.net/trac/wiki/manual Regards, Aaron -- Aaron Turner http://synfin.net/ http://tcpreplay.synfin.net/ - Pcap editing & replay tools for Unix ------------------------------------------------------------------------- Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT & business topics through brief surveys-and earn cash http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV _______________________________________________ Tcpreplay-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/tcpreplay-users
