Not sure what a "layer 2 capture" is. Any chance you could just email me the pcap? If it's large, you can use tcpdump to only grab the first 25 packets:
tcpdump -s 0 -r old.pcap -w new.pcap -c 25 On Wed, Apr 1, 2009 at 1:20 PM, Owen K. <owenkor...@comcast.net> wrote: > Hi > > [r...@localhost ~]# tcprewrite -V > tcprewrite version: 3.4.0 (build 2145) > Copyright 2001-2009 by Aaron Turner <aturner at synfin dot net> > Cache file supported: 04 > Compiled against libdnet: 1.11 > Compiled against libpcap: 0.9.4 > 64 bit packet counters: enabled > Verbose printing via tcpdump: enabled > Fragroute engine: enabled > > Basically I am trying the same command, but on a layer 2 capture instead of > a layer 3 capture. So I tried: > > tcprewrite --portmap=67:68 --infile=input.pcap --outfile=output.pcap > > It did not give me any kind of error message, but when I open the new output > file in Wireshark, I don't see all udp ports set to 68. > > ----- Original Message ----- > From: "Aaron Turner" <synfina...@gmail.com> > To: "Main forum for tcpreplay" <tcpreplay-users@lists.sourceforge.net> > Sent: Wednesday, April 01, 2009 4:11 PM > Subject: Re: [Tcpreplay-users] How to Re-map layer 2 TCP/UDP Ports > > > On Wed, Apr 1, 2009 at 12:42 PM, Owen K. <owenkor...@comcast.net> wrote: >> On a layer 3 trace (Wireshark), I can re-map the UDP ports from 67 to 68 >> without a problem using the following command: >> >> tcprewrite --portmap=67:68 --infile=input.pcap --outfile=output.pcap >> >> However, I am having difficulty using the same tcprewrite command to >> change >> a layer 2 capture. When I initiate the same command on a layer 2 trace, it >> does not seem to work. >> >> Does anyone know how to perform this? > > What is the command you're running? version? > > -- > Aaron Turner > http://synfin.net/ > http://tcpreplay.synfin.net/ - Pcap editing and replay tools for Unix & > Windows > Those who would give up essential Liberty, to purchase a little > temporary Safety, > deserve neither Liberty nor Safety. > -- Benjamin Franklin > > ------------------------------------------------------------------------------ > _______________________________________________ > Tcpreplay-users mailing list > Tcpreplay-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/tcpreplay-users > Support Information: http://tcpreplay.synfin.net/trac/wiki/Support > > > ------------------------------------------------------------------------------ > _______________________________________________ > Tcpreplay-users mailing list > Tcpreplay-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/tcpreplay-users > Support Information: http://tcpreplay.synfin.net/trac/wiki/Support > -- Aaron Turner http://synfin.net/ http://tcpreplay.synfin.net/ - Pcap editing and replay tools for Unix & Windows Those who would give up essential Liberty, to purchase a little temporary Safety, deserve neither Liberty nor Safety. -- Benjamin Franklin ------------------------------------------------------------------------------ _______________________________________________ Tcpreplay-users mailing list Tcpreplay-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/tcpreplay-users Support Information: http://tcpreplay.synfin.net/trac/wiki/Support
