No. tcpreplay never reads any traffic. It'll replay the SYN. the server
will see the SYN, and generate a new SYN-ACK, which tcpreplay won't do
anything about because it never reads any traffic. It'll go ahead to
blindly replay the original ACK, but the server will ignore it and reply
with an RST, because a valid ACK must use a sequence number from the real
SYN-ACK, which tcpreplay never saw, it just replayed the no longer valid
ACK from the pcap. The TCP three-way handshake was originally designed to
prevent accidentally wandering echoes of packets from being accepted, but
it effectively guarantees that tcpreplay cannot establish a connection.
------------------------------------------------------------------------------
Better than sec? Nothing is better than sec when it comes to
monitoring Big Data applications. Try Boundary one-second
resolution app monitoring today. Free.
http://p.sf.net/sfu/Boundary-dev2dev
_______________________________________________
Tcpreplay-users mailing list
Tcpreplay-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/tcpreplay-users
Support Information: http://tcpreplay.synfin.net/trac/wiki/Support
