Thanks Aaron for you quick response Okay for my first question, I should be looking for something other for now.
Yes I meant filtering on the client flows and as you suggested I tried to filter through wireshark using the ip.source tag and display on the list I wanted and save them to a new pcap and that helped. Thanks Again Stanley -----Original Message----- From: Aaron Turner [mailto:synfina...@gmail.com] Sent: Wednesday, April 22, 2009 5:13 PM To: Main forum for tcpreplay Subject: Re: [Tcpreplay-users] HTTP RST message send from Client On Wed, Apr 22, 2009 at 4:54 PM, Stanley Mathew <smat...@2wire.com> wrote: [snip problem about sending traffic to a http server] http://tcpreplay.synfin.net/trac/wiki/FAQ#Doestcpreplaysupportsendingtra ffictoaserver > Also wanted to take this occasion to ask about how to create a pcap file > with client transactions only using tcpprep from a pcap file which has both > client and server replies? I'm not really sure what the ask is here. "client transactions"? Basically tcpprep is for creating a cache file for later use with tcpreplay/tcprewrite- it doesn't create pcap files. If you're looking to filter out some packets from a pcap file to only get a specific client/server traffic, then I'd use tcpdump. something like: tcpdump -i old.pcap -w new.pcap -s 0 host <client ip> and host <server ip> would do the trick. you can even filter based on port(s) to limit to a specific connection. More info in the tcpdump man page. -- Aaron Turner http://synfin.net/ http://tcpreplay.synfin.net/ - Pcap editing and replay tools for Unix & Windows Those who would give up essential Liberty, to purchase a little temporary Safety, deserve neither Liberty nor Safety. -- Benjamin Franklin ------------------------------------------------------------------------ ------ Stay on top of everything new and different, both inside and around Java (TM) technology - register by April 22, and save $200 on the JavaOne (SM) conference, June 2-5, 2009, San Francisco. 300 plus technical and hands-on sessions. Register today. Use priority code J9JMT32. http://p.sf.net/sfu/p _______________________________________________ Tcpreplay-users mailing list Tcpreplay-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/tcpreplay-users Support Information: http://tcpreplay.synfin.net/trac/wiki/Support ------------------------------------------------------------------------------ Stay on top of everything new and different, both inside and around Java (TM) technology - register by April 22, and save $200 on the JavaOne (SM) conference, June 2-5, 2009, San Francisco. 300 plus technical and hands-on sessions. Register today. Use priority code J9JMT32. http://p.sf.net/sfu/p _______________________________________________ Tcpreplay-users mailing list Tcpreplay-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/tcpreplay-users Support Information: http://tcpreplay.synfin.net/trac/wiki/Support
