On 8/7/07, David <[EMAIL PROTECTED]> wrote: > Hello, > > I have a capture file in pcap format that does not include Ethernet > headers. I create a dummy interface in Linux and I am trying to > replay the packets across it. The tcpdump analysis that tcpreplay > shows is correct. However, the actual data that is sent is incorrect, > because it lacks an ethernet header (so the first few bytes of the IP > header get read as ethernet). > > I have looked for tools to add a 'fake' ethernet header but I have not > found any. > > Is there a way to get tcpreplay to add a fake ethernet header? Can I > add a header using another tool (od and text2pcap do not work > correctly)? Should this be considered as a feature request?
Hi David, Missing L2 headers is common for BSD RAW and BSD Loopback captures. tcprewrite can add a ethernet header for you. tcprewrite is part of the tcpreplay 3.0 suite. More information here: http://tcpreplay.synfin.net/trac/wiki/tcprewrite -- Aaron Turner http://synfin.net/ http://tcpreplay.synfin.net/ - Pcap editing & replay tools for Unix They that can give up essential liberty to obtain a little temporary safety deserve neither liberty nor safety. -- Benjamin Franklin ------------------------------------------------------------------------- This SF.net email is sponsored by: Splunk Inc. Still grepping through log files to find problems? Stop. Now Search log events and configuration files using AJAX and a browser. Download your FREE copy of Splunk now >> http://get.splunk.com/ _______________________________________________ Tcpreplay-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/tcpreplay-users
