tcpprep never modifies a pcap file. That warning is telling you that your original pcap is truncated- each packet is no larger then 96 bytes. This would explain why the NFS commands aren't there.
You should re-capture the traffic using somethingl like tcpdump using the -s0 flag in order to capture the entire packet. -Aaron On Mon, Jan 30, 2012 at 2:03 PM, Praveen K <kanda...@hotmail.com> wrote: > > > Hi Aaron, > > The initial pcap is from a client writing to a Server using NFS protocol, > yes the trace does not look right. I did see some error when using tcpprep > to prepare the cache file, are there any default options that can be used > with tcpprep so it does not discard any data and i can use that cache file > later on to overwrite source/dest IP and mac, right now everything seems to > work except that the data is getting truncated when i am using tcpprep. > > Thanks, > Praveen > > > > > ]# tcpprep --port --cachefile=/tmp/example.cache > --pcap=/vargen/tcpcapture/DMA_traces/2copies.cap > > Warning: /vargen/tcpcapture/DMA_traces/2copies.cap was captured using a > snaplen of 96 bytes. This may mean you have truncated packets. > > [root@ > > > > > > ------------------------------------------------------------------------------ > Try before you buy = See our experts in action! > The most comprehensive online learning library for Microsoft developers > is just $99.99! Visual Studio, SharePoint, SQL - plus HTML5, CSS3, MVC3, > Metro Style Apps, more. Free future releases when you subscribe now! > http://p.sf.net/sfu/learndevnow-dev2 > _______________________________________________ > Tcpreplay-users mailing list > Tcpreplay-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/tcpreplay-users > Support Information: http://tcpreplay.synfin.net/trac/wiki/Support -- Aaron Turner http://synfin.net/ Twitter: @synfinatic http://tcpreplay.synfin.net/ - Pcap editing and replay tools for Unix & Windows Those who would give up essential Liberty, to purchase a little temporary Safety, deserve neither Liberty nor Safety. -- Benjamin Franklin "carpe diem quam minimum credula postero" ------------------------------------------------------------------------------ Try before you buy = See our experts in action! The most comprehensive online learning library for Microsoft developers is just $99.99! Visual Studio, SharePoint, SQL - plus HTML5, CSS3, MVC3, Metro Style Apps, more. Free future releases when you subscribe now! http://p.sf.net/sfu/learndevnow-dev2 _______________________________________________ Tcpreplay-users mailing list Tcpreplay-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/tcpreplay-users Support Information: http://tcpreplay.synfin.net/trac/wiki/Support
