I don't believe text2pcap will do what you want for you automagically.
 What you will have to do is edit the text2pcap source file and add
the IP/TCP headers manually to each packet.

Of course, if you know C, it would probably be easier to edit the
text2pcap code to do the 3 way handshake for you.  That way you won't
have to manually keep track of seq/ack numbers in your hex.

-- 
Aaron Turner
http://synfin.net/
http://tcpreplay.synfin.net/ - Pcap editing & replay tools for Unix


On 3/23/07, n1i3n130 n1i3n130 <[EMAIL PROTECTED]> wrote:
> Hello,
> I have a pcap file with olny TCP tarffic. I would like to feed that file to
> tcpreplay in order to generate the same TCP traffic that the pcap file has.
> But I have notice that the packets that tcpreplay is generating have no TCP
> headers. Because the pcap file is created from text2pcap and text2pcap has
> not recreate the whole packet with the TCP header. Based on the text2pcap
> man page I could use the -T option, which is to define a specific source and
> destination port, and text2pcap is going to generate a dummy header for the
> packets. So I done that and all packets have the same destination port and
> source port, and the TCP flags in all packets are the same. Specifically in
> all TCP packets the ACK flag is on. This of cource is an undesirable result
> because is giving a completely different traffic from the one is in the
> original captured pcap file. In fact the original captured file has TCP
> packets with different TCP flags. Does anyone know how to make text2pcap to
> give me back the whole packet TCP headers?
>
> Thank you

-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys-and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
Tcpreplay-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/tcpreplay-users

Reply via email to