if you need to dump the original packet, do it before the replace() function. after the replacing, the original packet doesn't exist anymore.
2011-12-04 23:54:50 PST in ettercap
