Without debug enabled (./configure --enable-debug) I can't tell what's going on, but I suspect you're running into this bug http://tcpreplay.synfin.net/ticket/418
which was fixed in 3.4.4. Try upgrading, and if that doesn't work, compile in debug and send me the backtrace from that. Regards, Aaron On Wed, Jun 27, 2012 at 11:30 AM, Anderson, Michael <mband...@qca.qualcomm.com> wrote: > Tcpprep returns a "buffer overflow detected" error message when using tcpprep > 3.4.3 on Ubuntu 12.04 LTS. The pcap file was captured with Wireshark 1.6.2 > on Windows 7. (Should I use a different version of Wireshark?) > > The pcap file is attached, the error message is below, along with additional > details. > > $ tcpprep --port --cachefile=example.cache --pcap=example.pcap > > *** buffer overflow detected ***: tcpprep terminated > ======= Backtrace: ========= > /lib/i386-linux-gnu/libc.so.6(__fortify_fail+0x45)[0xb7713dd5] > /lib/i386-linux-gnu/libc.so.6(+0xfebaa)[0xb7712baa] > /lib/i386-linux-gnu/libc.so.6(+0xfe0d2)[0xb77120d2] > tcpprep[0x804fd38]$ tcpprep -V > tcpprep version: 3.4.3 (build 2375) > Copyright 2001-2009 by Aaron Turner <aturner at synfin dot net> > Cache file supported: 04 > Not compiled with libdnet. > Compiled against libpcap: 1.1.1 > 64 bit packet counters: enabled > Verbose printing via tcpdump: enabled > tcpprep[0x804a740] > /lib/i386-linux-gnu/libc.so.6(__libc_start_main+0xf3)[0xb762d4d3] > tcpprep[0x804ac25]i > ======= Memory map: ======== > 08048000-08098000 r-xp 00000000 08:01 27271718 /usr/bin/tcpprep > 08098000-08099000 r--p 0004f000 08:01 27271718 /usr/bin/tcpprep > 08099000-0809b000 rw-p 00050000 08:01 27271718 /usr/bin/tcpprep > 0809b000-080bc000 rw-p 00000000 00:00 0 > 09d8e000-09daf000 rw-p 00000000 00:00 0 [heap] > b75e5000-b7601000 r-xp 00000000 08:01 9175988 > /lib/i386-linux-gnu/libgcc_s.so.1 > b7601000-b7602000 r--p 0001b000 08:01 9175988 > /lib/i386-linux-gnu/libgcc_s.so.1 > b7602000-b7603000 rw-p 0001c000 08:01 9175988 > /lib/i386-linux-gnu/libgcc_s.so.1 > b7613000-b7614000 rw-p 00000000 00:00 0 > b7614000-b77b3000 r-xp 00000000 08:01 9175967 > /lib/i386-linux-gnu/libc-2.15.so > b77b3000-b77b5000 r--p 0019f000 08:01 9175967 > /lib/i386-linux-gnu/libc-2.15.so > b77b5000-b77b6000 rw-p 001a1000 08:01 9175967 > /lib/i386-linux-gnu/libc-2.15.so > b77b6000-b77b9000 rw-p 00000000 00:00 0 > b77c8000-b77cb000 rw-p 00000000 00:00 0 > b77cb000-b77cc000 r-xp 00000000 00:00 0 [vdso] > b77cc000-b77ec000 r-xp 00000000 08:01 9175947 > /lib/i386-linux-gnu/ld-2.15.so > b77ec000-b77ed000 r--p 0001f000 08:01 9175947 > /lib/i386-linux-gnu/ld-2.15.so > b77ed000-b77ee000 rw-p 00020000 08:01 9175947 > /lib/i386-linux-gnu/ld-2.15.so > bf8a6000-bf8c7000 rw-p 00000000 00:00 0 [stack] > Aborted (core dumped) > > > > > $ tcpprep -V > tcpprep version: 3.4.3 (build 2375) > Copyright 2001-2009 by Aaron Turner <aturner at synfin dot net> > Cache file supported: 04 > Not compiled with libdnet. > Compiled against libpcap: 1.1.1 > 64 bit packet counters: enabled > Verbose printing via tcpdump: enabled > > My system has Intel Gigabit Desktop Adapters. > > ------------------------------------------------------------------------------ > Live Security Virtual Conference > Exclusive live event will cover all the ways today's security and > threat landscape has changed and how IT managers can respond. Discussions > will include endpoint security, mobile security and the latest in malware > threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/ > _______________________________________________ > Tcpreplay-users mailing list > Tcpreplay-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/tcpreplay-users > Support Information: http://tcpreplay.synfin.net/trac/wiki/Support -- Aaron Turner http://synfin.net/ Twitter: @synfinatic http://tcpreplay.synfin.net/ - Pcap editing and replay tools for Unix & Windows Those who would give up essential Liberty, to purchase a little temporary Safety, deserve neither Liberty nor Safety. -- Benjamin Franklin "carpe diem quam minimum credula postero" ------------------------------------------------------------------------------ Live Security Virtual Conference Exclusive live event will cover all the ways today's security and threat landscape has changed and how IT managers can respond. Discussions will include endpoint security, mobile security and the latest in malware threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/ _______________________________________________ Tcpreplay-users mailing list Tcpreplay-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/tcpreplay-users Support Information: http://tcpreplay.synfin.net/trac/wiki/Support
