Is there a way to rewrite L1-3 data only and have it just accept L4-7? This concerns malformed packets that I want to keep malformed.
Packet 00:00:00:00:00:00 > 00:00:00:00:00:00, IPv4, length 60: 192.168.76.20 > 192.168.76.8: [|ESP] <---malformed ESP This will not write the output file. # tcprewrite --enet-dmac=BB:BB:BB:BB:BB:BB --enet-smac=AA:AA:AA:AA:AA:AA --pnat=192.168.76.20/32:192.168.129.1/32,192.168.76.8/32:192.168.1.1/32 --infile='esp_malformed.pcap' --outfile='./tmp/esp_malformed.pcap' Fatal Error: Error rewriting packets: From checksum.c:do_checksum() line 65: length of data must be > 0 # Packet IP 192.168.76.22 > 192.168.76.8: ESP(spi=0x1142ef60,seq=0x94142e3f), length 16 <---still malformed but seems to rewrite This is rewritten. I believe the warning is just that the ESP protocol is not supported for correcting a checksum. Is there a way to print out only problems above warning? # tcprewrite --enet-dmac=BB:BB:BB:BB:BB:BB --enet-smac=AA:AA:AA:AA:AA:AA --pnat=192.168.76.22/32:192.168.129.1/32,192.168.76.8/32:192.168.1.1/32 --infile='esp.pcap' --outfile='./tmp/esp_NORMAL.pcap' Warning: Unsupported protocol for checksum: 0x32 # ------------------------------------------------------------------------------ 5 Ways to Improve & Secure Unified Communications Unified Communications promises greater efficiencies for business. UC can improve internal communications as well as offer faster, more efficient ways to interact with customers and streamline customer service. Learn more! http://www.accelacomm.com/jaw/sfnl/114/51426253/ _______________________________________________ Tcpreplay-users mailing list Tcpreplay-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/tcpreplay-users Support Information: http://tcpreplay.synfin.net/trac/wiki/Support
