Sorry, i didn't get exactly when you did use "--enable-debug" and "-d2". Is there a way to use the pcap file anyway skipping those maliciuous packets or do i have to get them first out of the pcap file?
Regards, Hannes ----- Original Message ----- From: "Aaron Turner" <[EMAIL PROTECTED]> To: "Main forum for tcpreplay" <tcpreplay-users@lists.sourceforge.net> Sent: Wednesday, October 08, 2008 8:39 PM Subject: Re: [Tcpreplay-users] problem with tcprewrite > Packet #656 is 14 bytes long in the pcap (all the packets were > truncated, but this one more so). No IP header for a IPv4 frame, > means tcprewrite can't rewrite IP addresses. Hence the abortion of > execution. > > I used --enable-debug during ./configure and -d2 during execution to > pinpoint the issue. > > On Wed, Oct 8, 2008 at 11:12 AM, Morrison's Doghouse - Hannes > <[EMAIL PROTECTED]> wrote: >> Here is the pcap file. >> you can download the pcap file from >> http://www.morrisonsdoghouse.com/500.pcap. >> I used "./tcpprep --port -i 500.pcap -o input.cache" to create to >> cachefile. >> >> Ihave the same problem with many other files that i have taken from the >> following site: >> http://tracer.csl.sony.co.jp/mawi/ >> >> I hpe you can help me, >> Hannes >> >> >> ----- Original Message ----- >> From: "Aaron Turner" <[EMAIL PROTECTED]> >> To: "Main forum for tcpreplay" <tcpreplay-users@lists.sourceforge.net> >> Sent: Wednesday, October 08, 2008 5:51 PM >> Subject: Re: [Tcpreplay-users] problem with tcprewrite >> >> >>> On Wed, Oct 8, 2008 at 6:44 AM, Morrison's Doghouse - Hannes >>> <[EMAIL PROTECTED]> wrote: >>>> Hi, >>>> using this command >>>> ./tcprewrite --fixlen=pad --endpoints=10.1.16.3:10.1.4.2 >>>> --cachefile=input.cache --infile=500.pcap --outfile=d1/new.pcap >>>> --enet-dmac=00:07:E9:1F:96:59 >>>> I get this error message: >>>> tcprewrite: plugins/dlt_utils.c:216: tcpedit_dlt_l3data_copy: Assertion >>>> `l2len < pktlen' failed. >>>> What's the problem??? >>> >>> The layer 2 length of a frame is less then the size of the whole >>> packet- a sign of a corrupted or invalid pcap file. I'd need to have >>> a copy of your pcap file to provide more details. >>> >>> -- >>> Aaron Turner >>> http://synfin.net/ >>> http://tcpreplay.synfin.net/ - Pcap editing and replay tools for Unix & >>> Windows >>> They that can give up essential liberty to obtain a little temporary >>> safety deserve neither liberty nor safety. -- Benjamin Franklin >>> >>> ------------------------------------------------------------------------- >>> This SF.Net email is sponsored by the Moblin Your Move Developer's >>> challenge >>> Build the coolest Linux based applications with Moblin SDK & win great >>> prizes >>> Grand prize is a trip for two to an Open Source event anywhere in the >>> world >>> http://moblin-contest.org/redirect.php?banner_id=100&url=/ >>> _______________________________________________ >>> Tcpreplay-users mailing list >>> Tcpreplay-users@lists.sourceforge.net >>> https://lists.sourceforge.net/lists/listinfo/tcpreplay-users >>> Support Information: http://tcpreplay.synfin.net/trac/wiki/Support >> >> >> ------------------------------------------------------------------------- >> This SF.Net email is sponsored by the Moblin Your Move Developer's >> challenge >> Build the coolest Linux based applications with Moblin SDK & win great >> prizes >> Grand prize is a trip for two to an Open Source event anywhere in the >> world >> http://moblin-contest.org/redirect.php?banner_id=100&url=/ >> _______________________________________________ >> Tcpreplay-users mailing list >> Tcpreplay-users@lists.sourceforge.net >> https://lists.sourceforge.net/lists/listinfo/tcpreplay-users >> Support Information: http://tcpreplay.synfin.net/trac/wiki/Support >> > > > > -- > Aaron Turner > http://synfin.net/ > http://tcpreplay.synfin.net/ - Pcap editing and replay tools for Unix & > Windows > They that can give up essential liberty to obtain a little temporary > safety deserve neither liberty nor safety. -- Benjamin Franklin > > ------------------------------------------------------------------------- > This SF.Net email is sponsored by the Moblin Your Move Developer's > challenge > Build the coolest Linux based applications with Moblin SDK & win great > prizes > Grand prize is a trip for two to an Open Source event anywhere in the > world > http://moblin-contest.org/redirect.php?banner_id=100&url=/ > _______________________________________________ > Tcpreplay-users mailing list > Tcpreplay-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/tcpreplay-users > Support Information: http://tcpreplay.synfin.net/trac/wiki/Support ------------------------------------------------------------------------- This SF.Net email is sponsored by the Moblin Your Move Developer's challenge Build the coolest Linux based applications with Moblin SDK & win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100&url=/ _______________________________________________ Tcpreplay-users mailing list Tcpreplay-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/tcpreplay-users Support Information: http://tcpreplay.synfin.net/trac/wiki/Support
