Questions tagged [tcpreplay]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0
votes
1answer
18 views

How to replay tcpdump's recorded traffic (.pcap) into my proxy so I could inspect it?

I capture traffic on my local interface with tcpdump (in pcap/pcapng file) and I want to study it using apps like Charles/Fiddler, but then I have to direct it to its proxy somehow. How can I replay ...
0
votes
1answer
28 views

How to Replay a Process of Sending an email

I'm curious if anybody out there familiar with virtualization know of any options of recording an emulated machine (QEMU, KVM, VMware) so that when I boot up a machine, I record myself using the ...
0
votes
0answers
20 views

Networking via shared file(system) - User mode "networking"

I'm looking for ways to create bidirectional connection between 2 virtual machines without a network connection. VM1 would dump upstream traffic to a file on a shared disk, VM2 will read traffic and ...
0
votes
1answer
177 views

tcpreplay occupies 100% CPU

I'm running a pcap file of size 1G using tcpreplay command to check any any malicious traffic or not. Command took approx. more than 5 hours though the system has enough cores and RAM. System RAM: ...
0
votes
1answer
183 views

unable to use tcpreplay in cygwin because I can't find the interface name similar to eth0 in linux

I want to use tcpreplay in cygwin to replay recorded pcap file, but it turns out very difficult, after battling with issues in building tcpreplay in cygwin environment, now i need to overcome the last ...
0
votes
1answer
453 views

PCAPNG file that does not send packets through TCPReplay

Using tcpreplay I am able to send UDP packets from a pcapng file (Log.pcapng) on a linux machine using: sudo tcpreplay --intf1=enp9s0 --loop=10 log.pcapng Using Wireshark on a second Windows 10 ...
0
votes
1answer
209 views

How to block a pcap pumped by tcpreplay from one server by iptables on the other?

I am new to stack exchange. What I am trying is: I am pumping traffic from one server by the following command: tcpreplay -i ens3 ~/daniel/sipdump.pcap from server 1 And I am capturing the traffic in ...
4
votes
1answer
5k views

How to tcpreplay only packets satisfying a pcap filter rule?

I have a dump file with lots of various packets in it, but I want to selectively replay, say, only all udp packets to a given port number, without having to edit the dump file first. How?
0
votes
0answers
5k views

Replaying Client Hello from previous session

I am basically testing an SSL server. I need to capture the client hello and then replay the same client hello with exact same field values. Here are the steps that I performed- 1) Captured the client ...
4
votes
1answer
9k views

Why packets sent by tcpreplay don't appear on server?

I'm trying to replay pcap file to HTTP server. Before that I'm trying to manually check that I'm using tcpreplay correctly. I've start netcat -l 12345 to listen on specific port. Let's call it "...
3
votes
0answers
483 views

How can I playback a network capture through the same machine

I've been trying to get tcpreplay to work to replay a network capture I have on my system. re. Unfortunately, (from the FAQ): Can I send packets on the same computer running tcpreplay? ...
0
votes
0answers
660 views

Replaying packets on local machine other than loopback

This might sound very wierd; but can I replay a pcap file on a interface other than lo in local machine? I want to get packets on lets say eth1. It is not attached to any link as of now. I want the ...