You might want to see if the MS tool can export to the industry standard pcap format. -- Aaron Turner https://synfin.net/ Twitter: @synfinatic My father once told me that respect for the truth comes close to being the basis for all morality. "Something cannot emerge from nothing," he said. This is profound thinking if you understand how unstable "the truth" can be. -- Frank Herbert, Dune
On Thu, Mar 15, 2018 at 8:57 PM, Christopher Smith <christopher.sm...@au.gt.com> wrote: > Howdy, getting closer – looking for direction on (if possible?) a custom user > INPUT on reading an exported "MS Message Analyzer" *.cap file? Or, maybe > instead, a suggested 3rd party muncher before passing to tcprewrite as INPUT > it understands? > > > > --- the OS --- > > root@svlmelap07:~# cat /etc/lsb-release > DISTRIB_ID=Ubuntu > DISTRIB_RELEASE=14.04 > DISTRIB_CODENAME=trusty > DISTRIB_DESCRIPTION="Ubuntu 14.04.5 LTS" > > > --- the tcpreplay "install" --- > > root@svlmelap07:~# tcpreplay -V > tcpreplay version: 3.4.4 (build 2450) (debug) > Copyright 2000-2010 by Aaron Turner <aturner at synfin dot net> > Cache file supported: 04 > Not compiled with libdnet. > Compiled against libpcap: 1.5.3 > 64 bit packet counters: enabled > Verbose printing via tcpdump: enabled > Packet editing: disabled > Fragroute engine: disabled > Injection method: PF_PACKET send() > > > --- the tcpreplay "attempt" --- > > root@svlmelap07:~# tcpcapinfo ./Upload-100Mb-notcopy.cap > file size = 780268 bytes > magic = 0x55424d47 (unknown) > version = 515.1 > thiszone = 0x000307e2 > sigfigs = 0x000e0003 > snaplen = 1638419 > linktype = 0x039d0003 > Sorry, we only support file format version 2.4 > > > --- can see INPUT --> OUTPUT formats @ > http://tcpreplay.synfin.net/wiki/tcprewrite --- > > Plugins supported in output mode: > > Ethernet (enet) > Cisco HDLC (hdlc) > User defined Layer 2 (user) > Plugins supported in input mode: > > Ethernet > Cisco HDLC > Linux SLL > BSD Loopback > BSD Null > Raw IP > 802.11 > Juniper Ethernet (version >= 4.0) > > > Me (Christopher) > ________________________________ > > 'Grant Thornton' refers to the brand under which the Grant Thornton member > firms provide assurance, tax and advisory services to their clients and/or > refers to one or more member firms, as the context requires. Grant Thornton > Australia Ltd is a member firm of Grant Thornton International Ltd (GTIL). > GTIL and the member firms are not a worldwide partnership. GTIL and each > member firm is a separate legal entity. Services are delivered by the member > firms. GTIL does not provide services to clients. GTIL and its member firms > are not agents of, and do not obligate one another and are not liable for one > another’s acts or omissions. In the Australian context only, the use of the > term 'Grant Thornton' may refer to Grant Thornton Australia Limited ABN 41 > 127 556 389 and its Australian subsidiaries and related entities. GTIL is not > an Australian related entity to Grant Thornton Australia Limited. > > Liability limited by a scheme approved under Professional Standards > Legislation. > > Registered Office, Collins Square, Tower 1, Level 16, 727 Collins Street, > Docklands, VIC, 3008 > > DISCLAIMER > This email message and any related attachments are confidential and should > only be read by those persons to whom they were addressed. They may contain > copyright, personal or legally privileged information. If you are not the > intended recipient of this email, any use, copying or disclosure of this > information is strictly prohibited. If you have received this email in error > please notify the sender and delete this email immediately. Any > confidentiality, privilege or copyright is not waived or lost because this > email has been sent to you in error. Views expressed in this message are the > views of the sender and are not necessarily views of Grant Thornton, except > where the message expressly states otherwise. Any advice contained herein > should be treated as preliminary advice only and subject to formal written > confirmation. Although this email and any attachments are believed to be free > of any virus or any other defect which may cause damage or loss, it is the > responsibility of the recipient to ensure that they are virus‐free. Grant > Thornton accepts no liability for any loss or damage that may occur as a > result of the transmission of this email or its attachments to the recipient. > > ________________________________ > ------------------------------------------------------------------------------ > Check out the vibrant tech community on one of the world's most > engaging tech sites, Slashdot.org! http://sdm.link/slashdot > _______________________________________________ > Tcpreplay-users mailing list > Tcpreplay-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/tcpreplay-users > Support Information: http://tcpreplay.synfin.net/trac/wiki/Support ------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot _______________________________________________ Tcpreplay-users mailing list Tcpreplay-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/tcpreplay-users Support Information: http://tcpreplay.synfin.net/trac/wiki/Support
