Hello Aaron,
I used
sudo
tcpreplay --pps=25 --intf1=eth0 BT_DHCP.pcap
and it is gettind detected on the wireshark.
Thank a lot for the help.
But i have another question.
Can i send that pcap file from one interface to another interface provided that
i have 2 nic cards???
I was thinking of sending that BT_DHCP.pcap file from eth0 and getting the
output from eth1.
________________________________
From: Aaron Turner <synfina...@gmail.com>
To: Main forum for tcpreplay <tcpreplay-users@lists.sourceforge.net>
Sent: Wednesday, December 14, 2011 9:59 PM
Subject: Re: [Tcpreplay-users] Combining two pcap files
Open up the pcap in Wireshark and look at the timestamps in the pcap
header- you've got a bit time gap between the two pcaps which is
causing the delay since tcpreplay uses those timestamps to figure out
when to send the packets.
Basically you'll either need to override the timing in the pcap using
one of the available tcpreplay options (like --pps) or modify the
timestamps yourself.
On Wed, Dec 14, 2011 at 12:38 PM, Prosiac Akin <cramped_ga...@yahoo.com> wrote:
> Hello all,
>
> i tried to combine 2 pcap flies using this command.
>
> mergecap -w BT_DHCP.pcap BITTORRENT.pcap dhcp.pcap
>
> I then tried to replay the combined pcap filed BT_DHCP.pcap using the
> command
>
> sudo tcpreplay -i eth0 BT_DHCP.pcap
>
> I waited for nearly 13 minuts but no output was seen.
>
> During that time, i had also opened wireshark to see whether the packets are
> seen or not. The packets of DHCP was seen on the wireshark, however, the
> packet of BITTORRENT was not seen. I then canceled that operation. And the
> output was like this,
>
> sending out eth0
> processing file: BT_DHCP.pcap
> ^C
> Actual: 5 packets (1434 bytes) sent in 783.73 seconds
> Rated: 1.8 bps, 0.00 Mbps, 0.01 pps
>
> i don't know why the packets of BITTORRENT was not seen.
> However, when i individually use DHCP or BITTORRENT pcap file with the
> command (sudo tcpreplay -i eth0 DHCP.pcap),
>
> the output comes like this:
> sending out eth0
> processing file: dhcp.pcap
> Actual: 4 packets (1312 bytes) sent in 0.09 seconds
> Rated: 14577.8 bps, 0.11 Mbps, 44.44 pps
> Statistics for network device: eth0
> Attempted packets: 4
> Successful packets: 4
> Failed packets: 0
> Retried packets (ENOBUFS): 0
> Retried packets (EAGAIN): 0
>
> I am wondering, why it didn't came up with the merged pcap file .??
>
> Please help
--
Aaron Turner
http://synfin.net/ Twitter: @synfinatic
http://tcpreplay.synfin.net/ - Pcap editing and replay tools for Unix & Windows
Those who would give up essential Liberty, to purchase a little temporary
Safety, deserve neither Liberty nor Safety.
-- Benjamin Franklin
"carpe diem quam minimum credula postero"
------------------------------------------------------------------------------
Cloud Computing - Latest Buzzword or a Glimpse of the Future?
This paper surveys cloud computing today: What are the benefits?
Why are businesses embracing it? What are its payoffs and pitfalls?
http://www.accelacomm.com/jaw/sdnl/114/51425149/
_______________________________________________
Tcpreplay-users mailing list
Tcpreplay-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/tcpreplay-users
Support Information: http://tcpreplay.synfin.net/trac/wiki/Support
------------------------------------------------------------------------------
Cloud Computing - Latest Buzzword or a Glimpse of the Future?
This paper surveys cloud computing today: What are the benefits?
Why are businesses embracing it? What are its payoffs and pitfalls?
http://www.accelacomm.com/jaw/sdnl/114/51425149/
_______________________________________________
Tcpreplay-users mailing list
Tcpreplay-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/tcpreplay-users
Support Information: http://tcpreplay.synfin.net/trac/wiki/Support
