I am rewriting in two steps. Replace lay two then replace layer 3. I am pretty sure I use --dlt=enet in the first. But I'll verify when I circle back report the exact steps I am using.
-----Original Message----- From: Aaron Turner [mailto:synfina...@gmail.com] Sent: Wednesday, August 24, 2011 16:06 To: Main forum for tcpreplay Subject: Re: [Tcpreplay-users] Error message On Wed, Aug 24, 2011 at 1:25 PM, Mike Komer <mko...@juniper.net> wrote: > # tcprewrite --enet-vlan=del > --pnat=1.1.233.209/32:192.168.129.1/32,1.2.176.1/32:192.168.1.1/32 > --infile='file.pcap' --outfile='NORMAL.cap' > > > > Fatal Error: From ./plugins/dlt_linuxsll/linuxsll.c:dlt_linuxsll_encode() > line 219: > > DLT_LINUX_SLL plugin does not support packet encoding > > # > > > > Any ideas on this error? The capture is linux cooked and Wireshark thinks it > is fine. It's not that the pcap is invalid, it's that the Linux SLL tcpedit plugin doesn't support writing. Ie: you can read Linux SLL pcaps, but you need to write them in a different format (such as EN10MB aka Ethernet). See the --dlt option in tcprewrite for a list of valid output encapsulations. Note that you may need to provide other options in tcprewrite to do the conversion. -- Aaron Turner http://synfin.net/ Twitter: @synfinatic http://tcpreplay.synfin.net/ - Pcap editing and replay tools for Unix & Windows Those who would give up essential Liberty, to purchase a little temporary Safety, deserve neither Liberty nor Safety. -- Benjamin Franklin "carpe diem quam minimum credula postero" ------------------------------------------------------------------------------ EMC VNX: the world's simplest storage, starting under $10K The only unified storage solution that offers unified management Up to 160% more powerful than alternatives and 25% more efficient. Guaranteed. http://p.sf.net/sfu/emc-vnx-dev2dev _______________________________________________ Tcpreplay-users mailing list Tcpreplay-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/tcpreplay-users Support Information: http://tcpreplay.synfin.net/trac/wiki/Support ------------------------------------------------------------------------------ EMC VNX: the world's simplest storage, starting under $10K The only unified storage solution that offers unified management Up to 160% more powerful than alternatives and 25% more efficient. Guaranteed. http://p.sf.net/sfu/emc-vnx-dev2dev _______________________________________________ Tcpreplay-users mailing list Tcpreplay-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/tcpreplay-users Support Information: http://tcpreplay.synfin.net/trac/wiki/Support