On Sat, Feb 4, 2012 at 4:48 PM, Prosiac Akin <cramped_ga...@yahoo.com> wrote: > Hello Everyone, > > Does replying the pcap files through tcpreplay initiates the connection > tracking based on 5-tuples of the packet????
I'm not really sure I can answer that question without more information... what exactly would be tracking state or looking at the 5-tuple? > I tried to check whether the pcap files when being replayed was getting into > the queue or not with the code attached in the mail. If you're running netfilter on your tcpreplay box you'll be horribly disappointed. You need to run tcpreplay on a different system as the one running netfilter. > But, on the real scenario, when there is active internet and when we run > that code, it is clearly seen that the packets are getting into the queue. > However, while replaying it, no such active queue is seen. Two likely possibilities: 1. You didn't capture the entire TCP 3-way handshake and netfilter is ignoring the incomplete session 2. You're running tcpreplay on the same box as netfilter. > In both the above cases, the packets are seen in the wireshark. > > A small help is also highly appreciated. More information about your network setup and your pcap file would be necessary for me to provide any useful answers or advice. -- Aaron Turner http://synfin.net/ Twitter: @synfinatic http://tcpreplay.synfin.net/ - Pcap editing and replay tools for Unix & Windows Those who would give up essential Liberty, to purchase a little temporary Safety, deserve neither Liberty nor Safety. -- Benjamin Franklin "carpe diem quam minimum credula postero" ------------------------------------------------------------------------------ Try before you buy = See our experts in action! The most comprehensive online learning library for Microsoft developers is just $99.99! Visual Studio, SharePoint, SQL - plus HTML5, CSS3, MVC3, Metro Style Apps, more. Free future releases when you subscribe now! http://p.sf.net/sfu/learndevnow-dev2 _______________________________________________ Tcpreplay-users mailing list Tcpreplay-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/tcpreplay-users Support Information: http://tcpreplay.synfin.net/trac/wiki/Support
