On 8/29/07, Matevž Pustišek <[EMAIL PROTECTED]> wrote: > Aaron, hi! > > > > Could you tell me about two features of tcprewrite: > > > > > > 1. can it remove PPPoE headers from ethernet packets in a > > similar way as it can the vlan tags (--vlan=del). > > > > Nope. Code could be easily enhanced to do so though if > > you're so compelled. > > I am affraid I am not enough a programmer to do such a task. I removed the > eth header with --dlt=0 option and got a packet starting with PPPoE header as > one would expect. Is there another way to simply cut off first 48 bits of a > packet? If so, I would add an eth header and get the needed form. I noticed > that there was a DLT_PPP_ETHER type listed in dlt_names.h - could this maybe > help me somehow?
This isn't something that tcprewrite can do today. I'm a little confused though, what do you plan to do with the packets without the ethernet/PPPoE headers? > > > 2. does it support named pipes (instead of real files) for > > input and output? > > > > Probably. Meaning, I've never tried it, but I can't think of any > > reason why it wouldn't work. > > editcap and other (t)ethereal related tools (not the tethereal it self) do > not suppport named pipes > (http://ethereal.netmirror.org/lists/ethereal-dev/200407/msg00043.html), so I > wanted to verify this first. Only tcpprep would have this problem, since it often takes multiple passes over a file. Pretty pointless using tcpprep on a named pipe though, since even if you could create a cache file, you wouldn't have the pcap anymore to be able to send the packets! -- Aaron Turner http://synfin.net/ http://tcpreplay.synfin.net/ - Pcap editing & replay tools for Unix They that can give up essential liberty to obtain a little temporary safety deserve neither liberty nor safety. -- Benjamin Franklin ------------------------------------------------------------------------- This SF.net email is sponsored by: Splunk Inc. Still grepping through log files to find problems? Stop. Now Search log events and configuration files using AJAX and a browser. Download your FREE copy of Splunk now >> http://get.splunk.com/ _______________________________________________ Tcpreplay-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/tcpreplay-users
