Aaron, hi! 

> > Could you tell me about two features of tcprewrite:
> >
> > 1. can it remove PPPoE headers from ethernet packets in a 
> similar way as it can the vlan tags (--vlan=del).
> 
> Nope.  Code could be easily enhanced to do so though if 
> you're so compelled.

I am affraid I am not enough a programmer to do such a task. I removed the eth 
header with --dlt=0 option and got a packet starting with PPPoE header as one 
would expect. Is there another way to simply cut off first 48 bits of a packet? 
If so, I would add an eth header and get the needed form. I noticed that there 
was a DLT_PPP_ETHER type listed in dlt_names.h - could this maybe help me 
somehow?

> > 2. does it support named pipes (instead of real files) for 
> input and output?
> 
> Probably.  Meaning, I've never tried it, but I can't think of any
> reason why it wouldn't work.   

editcap and other (t)ethereal related tools (not the tethereal it self) do not 
suppport named pipes 
(http://ethereal.netmirror.org/lists/ethereal-dev/200407/msg00043.html), so I 
wanted to verify this first.

>If you have a problem with this, send
> me the details so I can reproduce the issue and I'll see what I can do.

As soon as I test it I will let you know.

best regards, Matevz

-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >>  http://get.splunk.com/
_______________________________________________
Tcpreplay-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/tcpreplay-users

Reply via email to