On Thu, Jun 11, 2009 at 1:36 PM, Darien Kindlund<dar...@kindlund.com> wrote: > My Questions: > - I'm pretty sure tcpreplay *can't* do this, but I'll ask anyway for > confirmation. Can the developer's clarify?
Correct. tcpreplay can not do this. The issue is more then timing, it's dealing with changing TCP initial sequence numbers, source ports and stuff like that. > - Is there any interest/possibility of baking this feature into a > version of the tcpreplay tools? Interest? Sure. Chances of it actually happening? Close to zero. The effort required to make this sort of thing happen is beyond what I have time to do on my own in my free time. In the past, the people who are interested in helping quickly throw up their hands in frustration once they wrap their head around all the corner cases to get a 50/50 chance of this sort of thing working for a given pcap. Things get a lot easier if you're taking a pcap of a given client/server and replaying it to the same client or server, but once you change the target things get messy really fast. > - Are there any other open-source projects or even commercial tools > that can do this? Seriously, the only thing close that I've seen is > the HTTPREPLAY tool by Microsoft > (http://blogs.msdn.com/emmanubo/archive/2007/06/04/introduction-to-strace-httpreplay-support-tools.aspx). > But that tool doesn't deal with PCAPs. Nothing that I'm aware of. Depending on how complex your HTTP stream is, you can fake it pretty easy though. Take your pcap, load it in Wireshark, extract the server to client flow and save it off in a new file. Then use netcat to serve up that file data to any client which connects on port 80. This will work for simple cases, but more complex situations will have a bunch of issues. Hope that helps, Aaron -- Aaron Turner http://synfin.net/ http://tcpreplay.synfin.net/ - Pcap editing and replay tools for Unix & Windows Those who would give up essential Liberty, to purchase a little temporary Safety, deserve neither Liberty nor Safety. -- Benjamin Franklin ------------------------------------------------------------------------------ Crystal Reports - New Free Runtime and 30 Day Trial Check out the new simplified licensing option that enables unlimited royalty-free distribution of the report engine for externally facing server and web deployment. http://p.sf.net/sfu/businessobjects _______________________________________________ Tcpreplay-users mailing list Tcpreplay-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/tcpreplay-users Support Information: http://tcpreplay.synfin.net/trac/wiki/Support
