It might not be those specific ones, but I'm sure I can get you some capture(s) or another that do the same thing.
There is one specific case I will try and find. It is a UDP packet, followed by to fragments (no valid layer 4 or up), followed by a response from the other side. tcpprep tries to send it all out secondary and if I recall it won't renumber the 4th packet's source. I'll try and get you something for examples. I will see what happens with splitting with ports for these specific cases. But, many of the captures are not sent normal ports and some don't even have ports. ------------------------------------------------------------------------------ Magic Quadrant for Content-Aware Data Loss Prevention Research study explores the data loss prevention market. Includes in-depth analysis on the changes within the DLP market, and the criteria used to evaluate the strengths and weaknesses of these DLP solutions. http://www.accelacomm.com/jaw/sfnl/114/51385063/ _______________________________________________ Tcpreplay-users mailing list Tcpreplay-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/tcpreplay-users Support Information: http://tcpreplay.synfin.net/trac/wiki/Support
