On Tue, Jan 27, 2009 at 12:03 AM, Nilesh Khambal <nkham...@yahoo.com> wrote: > On 1/26/09 8:47 PM, "Aaron Turner" <synfina...@gmail.com> wrote: > >> Yes, but you still need a properly formed pcap file to start off with. > >> If you had a DLT_RAW, DLT_LOOP or DLT_NULL pcap file without any L2 > >> header information you could add it with tcprewrite. > > Hi Aaron, > > Thanks for your reply. Does this mean, that if I have a DLT_RAW or DLT_NULL > in the pcap file which I believe is a global setting for the entire pcap > file, I would be able to add my own L2 information with tcprewrite.
Yes. > How > would tcprewrite know where the L3 payload start or does it, in this case, > expect the packet frame to start with L3 data? You guessed correctly. DLT_RAW means there is never a L2 header and it always starts with an IPv4 or IPv6 header. -- Aaron Turner http://synfin.net/ http://tcpreplay.synfin.net/ - Pcap editing and replay tools for Unix & Windows Those who would give up essential Liberty, to purchase a little temporary Safety, deserve neither Liberty nor Safety. -- Benjamin Franklin ------------------------------------------------------------------------------ This SF.net email is sponsored by: SourcForge Community SourceForge wants to tell your story. http://p.sf.net/sfu/sf-spreadtheword _______________________________________________ Tcpreplay-users mailing list Tcpreplay-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/tcpreplay-users Support Information: http://tcpreplay.synfin.net/trac/wiki/Support
