Hello all,

i tried to combine 2 pcap flies using this command.

mergecap -w BT_DHCP.pcap BITTORRENT.pcap dhcp.pcap

I then tried to replay the combined pcap filed BT_DHCP.pcap using the command

sudo tcpreplay -i eth0 BT_DHCP.pcap

I waited for  nearly 13 minuts but no output was seen.

During that time, i had also opened wireshark to see whether the packets are 
seen or not. The packets of DHCP was seen on the wireshark, however, the packet 
of BITTORRENT was not seen. I then canceled that operation. And the output was 
like this,

sending out eth0 
processing file: BT_DHCP.pcap
^C
Actual: 5 packets (1434 bytes) sent in 783.73 seconds
Rated: 1.8 bps, 0.00 Mbps, 0.01 pps

i don't know why the packets of BITTORRENT was not seen. 

However, when i individually use DHCP or BITTORRENT pcap file with the command 
(sudo tcpreplay -i eth0 DHCP.pcap),

the output comes like this:
sending out eth0 
processing file: dhcp.pcap
Actual: 4 packets (1312 bytes) sent in 0.09 seconds
Rated: 14577.8 bps, 0.11 Mbps, 44.44 pps
Statistics for network device: eth0
    Attempted packets:         4
    Successful packets:        4
    Failed packets:            0
    Retried packets (ENOBUFS): 0
    Retried packets (EAGAIN):  0


I am wondering, why it didn't came up with the merged pcap file .??

Please help
------------------------------------------------------------------------------
Cloud Computing - Latest Buzzword or a Glimpse of the Future?
This paper surveys cloud computing today: What are the benefits? 
Why are businesses embracing it? What are its payoffs and pitfalls?
http://www.accelacomm.com/jaw/sdnl/114/51425149/
_______________________________________________
Tcpreplay-users mailing list
Tcpreplay-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/tcpreplay-users
Support Information: http://tcpreplay.synfin.net/trac/wiki/Support

Reply via email to