You should see 4 DHCP messages... just change all UDP ports (bootpc) to 68... you should see a combination of port 67 and port 68. Just set everything to port 68.
----- Original Message ----- From: "Aaron Turner" <synfina...@gmail.com>
To: "Main forum for tcpreplay" <tcpreplay-users@lists.sourceforge.net> Sent: Wednesday, April 01, 2009 4:25 PM Subject: Re: [Tcpreplay-users] How to Re-map layer 2 TCP/UDP Ports Not sure what a "layer 2 capture" is. Any chance you could just email me the pcap? If it's large, you can use tcpdump to only grab the first 25 packets: tcpdump -s 0 -r old.pcap -w new.pcap -c 25 On Wed, Apr 1, 2009 at 1:20 PM, Owen K. <owenkor...@comcast.net> wrote:
Hi [r...@localhost ~]# tcprewrite -V tcprewrite version: 3.4.0 (build 2145) Copyright 2001-2009 by Aaron Turner <aturner at synfin dot net> Cache file supported: 04 Compiled against libdnet: 1.11 Compiled against libpcap: 0.9.4 64 bit packet counters: enabled Verbose printing via tcpdump: enabled Fragroute engine: enabledBasically I am trying the same command, but on a layer 2 capture instead ofa layer 3 capture. So I tried: tcprewrite --portmap=67:68 --infile=input.pcap --outfile=output.pcapIt did not give me any kind of error message, but when I open the new outputfile in Wireshark, I don't see all udp ports set to 68. ----- Original Message ----- From: "Aaron Turner" <synfina...@gmail.com> To: "Main forum for tcpreplay" <tcpreplay-users@lists.sourceforge.net> Sent: Wednesday, April 01, 2009 4:11 PM Subject: Re: [Tcpreplay-users] How to Re-map layer 2 TCP/UDP Ports On Wed, Apr 1, 2009 at 12:42 PM, Owen K. <owenkor...@comcast.net> wrote:On a layer 3 trace (Wireshark), I can re-map the UDP ports from 67 to 68 without a problem using the following command: tcprewrite --portmap=67:68 --infile=input.pcap --outfile=output.pcap However, I am having difficulty using the same tcprewrite command to changea layer 2 capture. When I initiate the same command on a layer 2 trace, itdoes not seem to work. Does anyone know how to perform this?What is the command you're running? version? -- Aaron Turner http://synfin.net/ http://tcpreplay.synfin.net/ - Pcap editing and replay tools for Unix & Windows Those who would give up essential Liberty, to purchase a little temporary Safety, deserve neither Liberty nor Safety. -- Benjamin Franklin ------------------------------------------------------------------------------ _______________________________________________ Tcpreplay-users mailing list Tcpreplay-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/tcpreplay-users Support Information: http://tcpreplay.synfin.net/trac/wiki/Support ------------------------------------------------------------------------------ _______________________________________________ Tcpreplay-users mailing list Tcpreplay-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/tcpreplay-users Support Information: http://tcpreplay.synfin.net/trac/wiki/Support
-- Aaron Turner http://synfin.net/http://tcpreplay.synfin.net/ - Pcap editing and replay tools for Unix & Windows
Those who would give up essential Liberty, to purchase a little temporary Safety, deserve neither Liberty nor Safety. -- Benjamin Franklin ------------------------------------------------------------------------------ _______________________________________________ Tcpreplay-users mailing list Tcpreplay-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/tcpreplay-users Support Information: http://tcpreplay.synfin.net/trac/wiki/Support
TcprewriteDORA.pcap
Description: Binary data
------------------------------------------------------------------------------
_______________________________________________ Tcpreplay-users mailing list Tcpreplay-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/tcpreplay-users Support Information: http://tcpreplay.synfin.net/trac/wiki/Support
