Basically, it doesn't like your pcap for some reason. Could be a bunch of reasons I suppose, but without looking at your pcap I couldn't really say. Honestly, tcpliveplay is pretty much "alpha" quality at this time and the author who was working on it (a college student) hasn't contributed to it in years.
-- Aaron Turner https://synfin.net/ Twitter: @synfinatic My father once told me that respect for the truth comes close to being the basis for all morality. "Something cannot emerge from nothing," he said. This is profound thinking if you understand how unstable "the truth" can be. -- Frank Herbert, Dune On Wed, Feb 20, 2019 at 12:29 PM Eric Paradis <epx...@gmail.com> wrote: > > Hi, I'm trying to run tcpliveplay with a pcap file of TCP traffic, but it > keeps giving me a fatal error: unable to rewrite PCAP file xxxx.pcap. > > When it fails, a new file called newfile.pcap is generated, but it's only 24 > bytes. > > The permissions on the input file are good, and I'm running as root, so any > idea what the problem might be? > > Thanks. > > PS - I searched the archive and saw one thread where someone had the same > issue, but there was no solution posted. > _______________________________________________ > Tcpreplay-users mailing list > Tcpreplay-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/tcpreplay-users > Support Information: http://tcpreplay.synfin.net/trac/wiki/Support _______________________________________________ Tcpreplay-users mailing list Tcpreplay-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/tcpreplay-users Support Information: http://tcpreplay.synfin.net/trac/wiki/Support
