I am rewriting in two steps. Replace lay two then replace layer 3. I am pretty 
sure I use --dlt=enet in the first. But I'll verify when I circle back report 
the exact steps I am using.



-----Original Message-----
From: Aaron Turner [mailto:synfina...@gmail.com]
Sent: Wednesday, August 24, 2011 16:06
To: Main forum for tcpreplay
Subject: Re: [Tcpreplay-users] Error message

On Wed, Aug 24, 2011 at 1:25 PM, Mike Komer <mko...@juniper.net> wrote:
> # tcprewrite --enet-vlan=del
> --pnat=1.1.233.209/32:192.168.129.1/32,1.2.176.1/32:192.168.1.1/32
> --infile='file.pcap' --outfile='NORMAL.cap'
>
>
>
> Fatal Error: From ./plugins/dlt_linuxsll/linuxsll.c:dlt_linuxsll_encode()
> line 219:
>
> DLT_LINUX_SLL plugin does not support packet encoding
>
> #
>
>
>
> Any ideas on this error? The capture is linux cooked and Wireshark thinks it
> is fine.

It's not that the pcap is invalid, it's that the Linux SLL tcpedit
plugin doesn't support writing.  Ie: you can read Linux SLL pcaps, but
you need to write them in a different format (such as EN10MB aka
Ethernet).  See the --dlt option in tcprewrite for a list of valid
output encapsulations.  Note that you may need to provide other
options in tcprewrite to do the conversion.


--
Aaron Turner
http://synfin.net/         Twitter: @synfinatic
http://tcpreplay.synfin.net/ - Pcap editing and replay tools for Unix & Windows
Those who would give up essential Liberty, to purchase a little temporary
Safety, deserve neither Liberty nor Safety.
    -- Benjamin Franklin
"carpe diem quam minimum credula postero"

------------------------------------------------------------------------------
EMC VNX: the world's simplest storage, starting under $10K
The only unified storage solution that offers unified management
Up to 160% more powerful than alternatives and 25% more efficient.
Guaranteed. http://p.sf.net/sfu/emc-vnx-dev2dev
_______________________________________________
Tcpreplay-users mailing list
Tcpreplay-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/tcpreplay-users
Support Information: http://tcpreplay.synfin.net/trac/wiki/Support

------------------------------------------------------------------------------
EMC VNX: the world's simplest storage, starting under $10K
The only unified storage solution that offers unified management 
Up to 160% more powerful than alternatives and 25% more efficient. 
Guaranteed. http://p.sf.net/sfu/emc-vnx-dev2dev
_______________________________________________
Tcpreplay-users mailing list
Tcpreplay-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/tcpreplay-users
Support Information: http://tcpreplay.synfin.net/trac/wiki/Support

Reply via email to