On Wed, Apr 1, 2009 at 1:35 PM, Owen K. <owenkor...@comcast.net> wrote: > In order to view this, you will need to open in Wireshark, go to Edit, > Preferences, Protocols, select Frame, then Treat all frames as Docsis > frames. > > You should see 4 DHCP messages... just change all UDP ports (bootpc) to > 68... you should see a combination of port 67 and port 68. Just set > everything to port 68.
The problem is your pcap claims it's straight ethernet (DLT_EN10MB), and tcprewrite isn't smart enough to do the Docsis trick to parse the docsis header and find the start of the ethernet header. Even if your pcap was some kind of Docsis DLT type, tcprewrite wouldn't know how to handle it anyways since it doesn't know anything about Docsis. It wouldn't be a lot of work to add docsis support relatively speaking, but I don't know when I would have time to do so. -- Aaron Turner http://synfin.net/ http://tcpreplay.synfin.net/ - Pcap editing and replay tools for Unix & Windows Those who would give up essential Liberty, to purchase a little temporary Safety, deserve neither Liberty nor Safety. -- Benjamin Franklin ------------------------------------------------------------------------------ _______________________________________________ Tcpreplay-users mailing list Tcpreplay-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/tcpreplay-users Support Information: http://tcpreplay.synfin.net/trac/wiki/Support
