I just filtered spanning-tree out of a small sample file that normally
causes the Warnings.... and no more Warnings.

I'm happy I get a nice clean run now but still would like to know why we
can't replay STP using tcpreplay.

I was just thinking that there might be a valid use case by injecting stp
and seeing how the switches react.

Anyways, thanks for pointing out the packet to me, it helped locate the
issue. How did you locate the first packet that gave the error #887 ?

On Fri, Apr 29, 2022 at 12:00 PM Tony E <anthony.efan...@gmail.com> wrote:

> That packet contains Spanning-Tree Protocol.
>
> Can tcpreplay process STP or other control plane protocols?
>
> Should I run my PCAPs through a filter to remove all control plane
> protocols?
>
> On Fri, Apr 29, 2022 at 11:46 AM Christoph Biedl <
> sourceforge.b...@manchmal.in-ulm.de> wrote:
>
>> Tony E wrote...
>>
>> > I'm using tcpreplay to replay a *.pcap file and getting alot of errors
>> on
>> > the screen:
>> >
>> > Warning: Unable to process unsupported DLT Type: Ethernet (0x1)
>>
>> While trying to reproduce that:
>>
>> > The pcap file is here:
>> > https://download.netresec.com/pcap/maccdc-2012/maccdc2012_00000.pcap.gz
>>
>> That is compressed size 331 Mbyte, uncompressed almost one Gbyte. To
>> safe other people from sifting through all the 8640118 frames, #887
>> seems to be the first that triggers this message. I'll attach that one,
>> in case it gets eaten somewhere, use editcap from wireshark:
>>
>>     editcap -r maccdc2012_00000.pcap short.pcap 887
>>
>> This was introduced somewhat lately. I cannot bisect here, somethings
>> broken in the toolchain or how I use it.
>>
>>     Christoph
>> _______________________________________________
>> Tcpreplay-users mailing list
>> Tcpreplay-users@lists.sourceforge.net
>> https://lists.sourceforge.net/lists/listinfo/tcpreplay-users
>> Support Information: http://tcpreplay.synfin.net/trac/wiki/Support
>
>
_______________________________________________
Tcpreplay-users mailing list
Tcpreplay-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/tcpreplay-users
Support Information: http://tcpreplay.synfin.net/trac/wiki/Support

Reply via email to