Hi Aaron,
Thanks for the reply. I tried by saving as a correct format. But still I am
seeing the error. Please advise...
tcpprep --cidr=171.71.0.0/16 --pcap=http1.pcap -cachefile=http1.cache
ERROR: only one cidr option allowed
tcpprep (tcpprep) - Create a tcpreplay cache cache file from a pcap file.
USAGE: tcpprep [ -<flag> [<val>] | --<name>[{=| }<val>] ]...
-a, --auto=str Auto-split mode
-c, --cidr=str CIDR-split mode
-r, --regex=str Regex-split mode
-p, --port Port-split mode
-e, --mac=str Source MAC split mode
--reverse Matches to be client instead of server
-C, --comment=str Embeded cache file comment
--no-arg-comment Do not embed any cache file comment
-x, --include=str Include only packets matching rule
-X, --exclude=str Exclude any packet matching this rule
-o, --cachefile=str Output cache file
-i, --pcap=str Input pcap file to process
-P, --print-comment=str Print embedded comment in the specified cache file
-I, --print-info=str Print basic info from the specified cache file
-S, --print-stats=str Print statistical information about the specified
cache file
-s, --services=str Load services file for server ports
-N, --nonip Send non-IP traffic out server interface
-R, --ratio=str Ratio of client to server packets
-m, --minmask=num Minimum network mask length in auto mode
-M, --maxmask=num Maximum network mask length in auto mode
-V, --version Print version information
-h, --less-help Display less usage information and exit
-H, --help Display usage information and exit
-!, --more-help Extended usage information passed thru pager
--save-opts[=arg] Save the option state to a config file
--load-opts=str Load options from a config file
Options are specified by doubled hyphens and their name
or by a single hyphen and the flag character.
tcpprep is a ``pcap(3)'' file pre-processor which creates a cache
file which provides "rules" for ``tcprewrite(1)'' and ``tcpreplay(1)''
on how to process and send packets.
Rgds
Chinna
-----Original Message-----
From: Aaron Turner [mailto:[email protected]]
Sent: Thursday, October 07, 2010 9:53 PM
To: Main forum for tcpreplay
Subject: Re: [Tcpreplay-users] Query
On Wed, Oct 6, 2010 at 11:08 PM, Chinna Morampalle (cmorampa)
<[email protected]> wrote:
> Hi All,
>
> I am seeing issue in running "tcpprep" on my capture file. I am using the
> following CLI for this.
>
>
>
> tcpprep --cidr=171.71.0.0/16,207.25.0.0/16 --pcap=http.pcap
> --cachefile=http.cache
>
>
>
> I am getting the following error:
>
>
>
> [r...@tcpreplay-lnx tcpreplay-3.4.4]# tcpprep
> --cidr=171.71.0.0/16,207.25.0.0/16 --pcap=http.pcap --cachefile=http.cache
>
>
>
> Fatal Error: Error opening file: bad dump file format
>
>
>
> Please advice me how to resolve this issue ?
your http.pcap file isn't a valid pcap file. Wireshark may be able to
open it, but it supports a lot more file formats then pcap. You can
use Wireshark's File->Save As feature to save it to pcap.
--
Aaron Turner
http://synfin.net/ Twitter: @synfinatic
http://tcpreplay.synfin.net/ - Pcap editing and replay tools for Unix & Windows
Those who would give up essential Liberty, to purchase a little temporary
Safety, deserve neither Liberty nor Safety.
-- Benjamin Franklin
"carpe diem quam minimum credula postero"
------------------------------------------------------------------------------
Beautiful is writing same markup. Internet Explorer 9 supports
standards for HTML5, CSS3, SVG 1.1, ECMAScript5, and DOM L2 & L3.
Spend less time writing and rewriting code and more time creating great
experiences on the web. Be a part of the beta today.
http://p.sf.net/sfu/beautyoftheweb
_______________________________________________
Tcpreplay-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/tcpreplay-users
Support Information: http://tcpreplay.synfin.net/trac/wiki/Support
------------------------------------------------------------------------------
Beautiful is writing same markup. Internet Explorer 9 supports
standards for HTML5, CSS3, SVG 1.1, ECMAScript5, and DOM L2 & L3.
Spend less time writing and rewriting code and more time creating great
experiences on the web. Be a part of the beta today.
http://p.sf.net/sfu/beautyoftheweb
_______________________________________________
Tcpreplay-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/tcpreplay-users
Support Information: http://tcpreplay.synfin.net/trac/wiki/Support
