That packet contains Spanning-Tree Protocol. Can tcpreplay process STP or other control plane protocols?
Should I run my PCAPs through a filter to remove all control plane protocols? On Fri, Apr 29, 2022 at 11:46 AM Christoph Biedl < sourceforge.b...@manchmal.in-ulm.de> wrote: > Tony E wrote... > > > I'm using tcpreplay to replay a *.pcap file and getting alot of errors on > > the screen: > > > > Warning: Unable to process unsupported DLT Type: Ethernet (0x1) > > While trying to reproduce that: > > > The pcap file is here: > > https://download.netresec.com/pcap/maccdc-2012/maccdc2012_00000.pcap.gz > > That is compressed size 331 Mbyte, uncompressed almost one Gbyte. To > safe other people from sifting through all the 8640118 frames, #887 > seems to be the first that triggers this message. I'll attach that one, > in case it gets eaten somewhere, use editcap from wireshark: > > editcap -r maccdc2012_00000.pcap short.pcap 887 > > This was introduced somewhat lately. I cannot bisect here, somethings > broken in the toolchain or how I use it. > > Christoph > _______________________________________________ > Tcpreplay-users mailing list > Tcpreplay-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/tcpreplay-users > Support Information: http://tcpreplay.synfin.net/trac/wiki/Support
_______________________________________________ Tcpreplay-users mailing list Tcpreplay-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/tcpreplay-users Support Information: http://tcpreplay.synfin.net/trac/wiki/Support
