On Mon, Feb 1, 2010 at 9:41 AM, Geoff <[email protected]> wrote: > I should have said definition of state referring to "By utilizing tcpprep > cache files, tcpreplay can split traffic between two interfaces. This allows > tcpreplay to send traffic through a device and emulate both client and > server sides of the connection, thereby maintaining state." > http://tcpreplay.synfin.net/wiki/tcpreplay > I'm guessing this maintains the timing/order of the packets based on your > last response, just want to clarify this is for all packets in the capture > after running through tcpprep.
Right. Packets are replayed in order. "state" in this context is referring to inline devices like IPS's who try to follow the state transitions of protocols as the packets are processed. > > and regarding sequential replay > heres an example for multiple file playback without split traffic > tcpreplay -i eth0 file1 file2 file3 file4 > > example of single file split traffic > tcpreplay --cachefile=sample.prep --intf1=eth0 --intf2=eth1 sample.pcap > > with split traffic, can I do multiple files? Right, using a tcpprep cache file, you're limited to a single pcap. Of course, you can always use something like Wireshark's "mergecap" tool to merge the pcaps. Just be careful with the timestamps: tcpreplay doesn't like it when packets go "back in time". It'll replay them, but your packet timings will act strange if you don't use a constant time replay method. -- Aaron Turner http://synfin.net/ http://tcpreplay.synfin.net/ - Pcap editing and replay tools for Unix & Windows Those who would give up essential Liberty, to purchase a little temporary Safety, deserve neither Liberty nor Safety. -- Benjamin Franklin "carpe diem quam minimum credula postero" ------------------------------------------------------------------------------ The Planet: dedicated and managed hosting, cloud storage, colocation Stay online with enterprise data centers and the best network in the business Choose flexible plans and management services without long-term contracts Personal 24x7 support from experience hosting pros just a phone call away. http://p.sf.net/sfu/theplanet-com _______________________________________________ Tcpreplay-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/tcpreplay-users Support Information: http://tcpreplay.synfin.net/trac/wiki/Support
