You can subscribe to this list here.
2002 |
Jan
|
Feb
|
Mar
|
Apr
|
May
|
Jun
(13) |
Jul
|
Aug
(7) |
Sep
|
Oct
|
Nov
(3) |
Dec
(6) |
---|---|---|---|---|---|---|---|---|---|---|---|---|
2003 |
Jan
(17) |
Feb
(4) |
Mar
(4) |
Apr
(7) |
May
(11) |
Jun
(7) |
Jul
(2) |
Aug
(5) |
Sep
(2) |
Oct
(5) |
Nov
(2) |
Dec
(2) |
2004 |
Jan
(4) |
Feb
(11) |
Mar
|
Apr
(2) |
May
(13) |
Jun
(2) |
Jul
(17) |
Aug
|
Sep
(8) |
Oct
|
Nov
(6) |
Dec
|
2005 |
Jan
(4) |
Feb
(2) |
Mar
|
Apr
(7) |
May
(16) |
Jun
(39) |
Jul
(11) |
Aug
(12) |
Sep
(24) |
Oct
(16) |
Nov
(10) |
Dec
(16) |
2006 |
Jan
|
Feb
(9) |
Mar
(14) |
Apr
(1) |
May
(8) |
Jun
(5) |
Jul
(8) |
Aug
(50) |
Sep
(16) |
Oct
(11) |
Nov
(19) |
Dec
(2) |
2007 |
Jan
(14) |
Feb
(8) |
Mar
(27) |
Apr
(60) |
May
(8) |
Jun
(2) |
Jul
(43) |
Aug
(8) |
Sep
(11) |
Oct
(19) |
Nov
(6) |
Dec
(23) |
2008 |
Jan
(21) |
Feb
(11) |
Mar
(7) |
Apr
(15) |
May
(70) |
Jun
(19) |
Jul
(21) |
Aug
(2) |
Sep
(3) |
Oct
(22) |
Nov
(9) |
Dec
(11) |
2009 |
Jan
(42) |
Feb
(33) |
Mar
(2) |
Apr
(23) |
May
(15) |
Jun
(28) |
Jul
(19) |
Aug
(20) |
Sep
(12) |
Oct
(2) |
Nov
(13) |
Dec
(13) |
2010 |
Jan
(15) |
Feb
(8) |
Mar
(19) |
Apr
(6) |
May
(11) |
Jun
(4) |
Jul
|
Aug
(10) |
Sep
(18) |
Oct
(15) |
Nov
(3) |
Dec
(9) |
2011 |
Jan
(4) |
Feb
(6) |
Mar
(4) |
Apr
(4) |
May
(2) |
Jun
(32) |
Jul
(26) |
Aug
(22) |
Sep
(8) |
Oct
(29) |
Nov
(8) |
Dec
(49) |
2012 |
Jan
(8) |
Feb
(23) |
Mar
(12) |
Apr
(23) |
May
(9) |
Jun
(15) |
Jul
(2) |
Aug
(9) |
Sep
(28) |
Oct
(22) |
Nov
(1) |
Dec
(5) |
2013 |
Jan
(3) |
Feb
(11) |
Mar
(13) |
Apr
|
May
(3) |
Jun
(1) |
Jul
|
Aug
(2) |
Sep
(2) |
Oct
(2) |
Nov
(5) |
Dec
(10) |
2014 |
Jan
(5) |
Feb
(36) |
Mar
(25) |
Apr
(18) |
May
(16) |
Jun
(14) |
Jul
(5) |
Aug
(2) |
Sep
(23) |
Oct
(9) |
Nov
|
Dec
(10) |
2015 |
Jan
|
Feb
|
Mar
|
Apr
(12) |
May
(4) |
Jun
(18) |
Jul
(9) |
Aug
(2) |
Sep
(1) |
Oct
|
Nov
(11) |
Dec
(9) |
2016 |
Jan
(4) |
Feb
(7) |
Mar
(5) |
Apr
(14) |
May
(2) |
Jun
(5) |
Jul
(27) |
Aug
(7) |
Sep
(10) |
Oct
(4) |
Nov
(3) |
Dec
|
2017 |
Jan
|
Feb
(3) |
Mar
(4) |
Apr
(8) |
May
(3) |
Jun
(2) |
Jul
(4) |
Aug
(4) |
Sep
|
Oct
(23) |
Nov
(6) |
Dec
|
2018 |
Jan
(7) |
Feb
(2) |
Mar
(3) |
Apr
|
May
|
Jun
|
Jul
|
Aug
|
Sep
(2) |
Oct
(2) |
Nov
(1) |
Dec
(1) |
2019 |
Jan
(1) |
Feb
(4) |
Mar
(3) |
Apr
|
May
|
Jun
|
Jul
(2) |
Aug
|
Sep
|
Oct
(2) |
Nov
|
Dec
|
2020 |
Jan
(6) |
Feb
|
Mar
|
Apr
(3) |
May
|
Jun
(7) |
Jul
(4) |
Aug
|
Sep
|
Oct
|
Nov
|
Dec
|
2021 |
Jan
|
Feb
|
Mar
(2) |
Apr
(4) |
May
(1) |
Jun
(5) |
Jul
|
Aug
|
Sep
|
Oct
|
Nov
|
Dec
|
2022 |
Jan
(1) |
Feb
|
Mar
|
Apr
(5) |
May
(1) |
Jun
|
Jul
|
Aug
(3) |
Sep
|
Oct
|
Nov
(1) |
Dec
(6) |
2023 |
Jan
(1) |
Feb
|
Mar
|
Apr
|
May
(3) |
Jun
(1) |
Jul
|
Aug
|
Sep
|
Oct
(1) |
Nov
(1) |
Dec
|
From: Rama K. P. C. <rkp...@gm...> - 2023-11-30 03:31:38
|
Hi, I am running tcp rewrite with the below example and always getting the error "segmentation fault ". Input PCAP is attached with this mail. Without -C tcprewrite is working but the ipv4 header shows checksum "validation disabled" to correct this added -C option and getting error "segmentation fault" How to solve the issue? tcprewrite -C --infile=DNS.pcapng.cap --outfile=dns_ample.pcap --srcipmap=192.168.1.52:10.0.0.222 --enet-dmac=80:da:c2:dc:c8:fa --verbose zsh: segmentation fault tcprewrite -C --infile=DNS.pcapng.cap --outfile=dns_sample.pcap --verbose Regards, Rama |
From: christophe r. <cro...@ya...> - 2023-10-26 09:20:06
|
Hi, I'm using tcpreplay on kernel linux ARM64:tcpreplay-edit -Vtcpreplay version: 4.3.1 (build git:v4.3.1) (debug)Copyright 2013-2018 by Fred Klassen <tcpreplay at appneta dot com> - AppNetaCopyright 2000-2012 by Aaron Turner <aturner at synfin dot net>The entire Tcpreplay Suite is licensed under the GPLv3Cache file supported: 04Not compiled with libdnet.Compiled against libpcap: 1.10.464 bit packet counters: enabledVerbose printing via tcpdump: enabledPacket editing: enabledFragroute engine: disabledInjection method: PF_PACKET send()Not compiled with netmap I would like to know if it is possible to manage skb priority of frame with tcpreplay-edit, because when I use: iperf3 -c 192.168.200.30 -u -p 5001 --tos 0xa ==> iperf3 modified skb->priority = 2 (which correspond to tos=0xa), it also modified IPv4 header TOS field with value 0xa (normal behavior expected) When I use tcpreplay-edit --intf1=end0.200 --tos=0xa pcp2_output2.pcap==> IPv4 header TOS field is updated with value 0xa, but skb->priority=0I did not succeed to update frame priority with tcpreplay/edit. (it is always 0) Is it well known issue ? If not how to proceed ? Thanks for your helpRegards,Christophe |
From: Fred K. <fre...@br...> - 2023-06-11 18:52:42
|
Announcing Tcpreplay suite 4.4.4 This release contains bug fixes only.What's Changed • dlt_jnpr_ether_cleanup: check subctx before cleanup by @Marsman1996 in #781 • Bug #780 assert tcpedit dlt cleanup by @fklassen in #800 • Fix bugs caused by strtok_r by @Marsman1996 in #783 • Bug #782 #784 #785 #786 #787 #788 strtok r isuses by @fklassen in #801 • Update en10mb.c by @david-guti in #793 • PR #793 ip6 unicast flood by @fklassen in #802 • Bug #719 fix overflow check for parse_mpls() by @fklassen in #804 • PR #793 - update tests for corrected IPv6 MAC by @fklassen in #805 • PR #793 - update tests for vlandel by @fklassen in #806 • Feature #773 gh actions ci by @fklassen in #807 New Contributors • @Marsman1996 made their first contribution in #781 • @david-guti made their first contribution in #793 Full Changelog: v4.4.3…v4.4.4 Download: * https://github.com/appneta/tcpreplay/releases/tag/v4.4.4 * https://sourceforge.net/projects/tcpreplay/files/ Fred Klassen Master Engineer Broadcom Inc. -- This electronic communication and the information and any files transmitted with it, or attached to it, are confidential and are intended solely for the use of the individual or entity to whom it is addressed and may contain information that is confidential, legally privileged, protected by privacy laws, or otherwise restricted from disclosure to anyone else. If you are not the intended recipient or the person responsible for delivering the e-mail to the intended recipient, you are hereby notified that any use, copying, distributing, dissemination, forwarding, printing, or copying of this e-mail is strictly prohibited. If you received this e-mail in error, please return the e-mail to the sender, delete it from your computer, and destroy any printed copy of it. |
From: steve f. <st...@fr...> - 2023-05-20 21:56:26
|
Hello, As it turns out, this actually did work several months ago with "tap" devices, using version 4.3.2 of tcpreplay - and with this version of Ubuntu/kernel: # uname -a Linux ubuntu20 5.4.0-144-generic #161-Ubuntu SMP Fri Feb 3 14:49:04 UTC 2023 x86_64 x86_64 x86_64 GNU/Linux This test was rewriting the destination IP to that of the local "ens18" interface, and there was a script listening for UDP packets on INADDR_ANY (FWIW, in this case on port 4431) and that script was able to receive the packet produced by tcpreplay-edit that was injected via tap0. At the time, I think tcpreplay version 4.4.2 had just been released, so I tested with that, but with 4.4.2, the script did *not* receive the packet. With older kernels and 4.3.2, it also fails - I haven't tried newer kernels: ------------------------------------------------------------------------ # tcpreplay-edit -i tap0 -D 0.0.0.0/0:192.168.1.88/32 ... my.pcap Actual: 1 packets (1360 bytes) sent in 0.000015 seconds Rated: 90666666.6 Bps, 725.33 Mbps, 66666.66 pps Statistics for network device: tap0 Successful packets: 1 Failed packets: 0 Truncated packets: 0 Retried packets (ENOBUFS): 0 Retried packets (EAGAIN): 0 # ip a s ens18 2: ens18: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000 link/ether 36:46:97:26:fb:36 brd ff:ff:ff:ff:ff:ff inet 192.168.1.88/24 brd 192.168.1.255 scope global ens18 valid_lft forever preferred_lft forever # diff --side-by-side <(/usr/bin/tcpreplay-edit --version 2>&1) <(/usr/local/bin/tcpreplay-edit --version 2>&1) tcpreplay version: 4.3.2 (build git:v4.3.2) (debug) | tcpreplay version: 4.4.2 (build git:) Copyright 2013-2018 by Fred Klassen <tcpreplay at appneta dot | Copyright 2013-2022 by Fred Klassen <tcpreplay at appneta dot Copyright 2000-2012 by Aaron Turner <aturner at synfin dot ne Copyright 2000-2012 by Aaron Turner <aturner at synfin dot ne The entire Tcpreplay Suite is licensed under the GPLv3 The entire Tcpreplay Suite is licensed under the GPLv3 Cache file supported: 04 Cache file supported: 04 Not compiled with libdnet. Not compiled with libdnet. Compiled against libpcap: 1.9.1 Compiled against libpcap: 1.9.1 64 bit packet counters: enabled 64 bit packet counters: enabled Verbose printing via tcpdump: enabled Verbose printing via tcpdump: enabled Packet editing: enabled Packet editing: enabled Fragroute engine: disabled Fragroute engine: disabled Injection method: PF_PACKET send() Injection method: PF_PACKET send() Not compiled with netmap Not compiled with netmap ------------------------------------------------------------------------ Best regards, Steve On 5/17/2023 9:32 PM, Aaron Turner wrote: > Can’t send packets to the local host. > > -Aaron > > >> On May 17, 2023, at 11:07 AM, Somasekhar K<som...@gm...> wrote: >> >> >> Hi, >> I have a requirement to use tcpreplay in a single Ethernet interface. >> For example if the Ethernet interface name is eth0. >> I am now to capture packets via tcpdump >> #tcpdump -i eth0 -w data.pcap udp >> >> However when I use >> # tcpreplay -i eth0 data.pcap >> I am unable to receive the data in socket.. can u kindly provide me solution to this problem.. my constraint is I am having single Ethernet interface . >> >> -regards, >> Som >> >> >> >> >> _______________________________________________ >> Tcpreplay-users mailing list >> Tcp...@li... >> https://lists.sourceforge.net/lists/listinfo/tcpreplay-users >> Support Information:http://tcpreplay.synfin.net/trac/wiki/Support > > _______________________________________________ > Tcpreplay-users mailing list > Tcp...@li... > https://lists.sourceforge.net/lists/listinfo/tcpreplay-users > Support Information:http://tcpreplay.synfin.net/trac/wiki/Support |
From: Aaron T. <syn...@gm...> - 2023-05-18 02:32:43
|
Can’t send packets to the local host. -Aaron > On May 17, 2023, at 11:07 AM, Somasekhar K <som...@gm...> wrote: > > > Hi, > I have a requirement to use tcpreplay in a single Ethernet interface. > For example if the Ethernet interface name is eth0. > I am now to capture packets via tcpdump > #tcpdump -i eth0 -w data.pcap udp > > However when I use > # tcpreplay -i eth0 data.pcap > I am unable to receive the data in socket.. can u kindly provide me solution to this problem.. my constraint is I am having single Ethernet interface . > > -regards, > Som > > > > > _______________________________________________ > Tcpreplay-users mailing list > Tcp...@li... > https://lists.sourceforge.net/lists/listinfo/tcpreplay-users > Support Information: http://tcpreplay.synfin.net/trac/wiki/Support |
From: Somasekhar K <som...@gm...> - 2023-05-17 18:06:25
|
Hi, I have a requirement to use tcpreplay in a single Ethernet interface. For example if the Ethernet interface name is eth0. I am now to capture packets via tcpdump #tcpdump -i eth0 -w data.pcap udp However when I use # tcpreplay -i eth0 data.pcap I am unable to receive the data in socket.. can u kindly provide me solution to this problem.. my constraint is I am having single Ethernet interface . -regards, Som |
From: Fred K. <fre...@br...> - 2023-01-02 17:54:40
|
This is Tcpreplay suite 4.4.3 This release contains bug fixes only. https://github.com/appneta/tcpreplay/releases/tag/v4.4.3 What's Changed * Feature #759: Upgrade autogen/libopts to 5.18.16 by @fklassen in https://github.com/appneta/tcpreplay/pull/760 * Bug #751 don't exit after send error by @fklassen in https://github.com/appneta/tcpreplay/pull/761 * Bug #750: configure: libpcap version robustness by @fklassen in https://github.com/appneta/tcpreplay/pull/764 * Bug #749 flow stats: avoid overstating flow packet count by @fklassen in https://github.com/appneta/tcpreplay/pull/765 * Bug #750 more libpcap version updates by @fklassen in https://github.com/appneta/tcpreplay/pull/766 * Bug #767 tests: support for out-of-tree tests by @fklassen in https://github.com/appneta/tcpreplay/pull/768 * Bug #750 - fix macOS test failure by @fklassen in https://github.com/appneta/tcpreplay/pull/770 * 4.4.3 by @fklassen in https://github.com/appneta/tcpreplay/pull/769 and https://github.com/appneta/tcpreplay/pull/771 Full Changelog: https://github.com/appneta/tcpreplay/compare/v4.4.2...v4.4.3 Fred Klassen -- This electronic communication and the information and any files transmitted with it, or attached to it, are confidential and are intended solely for the use of the individual or entity to whom it is addressed and may contain information that is confidential, legally privileged, protected by privacy laws, or otherwise restricted from disclosure to anyone else. If you are not the intended recipient or the person responsible for delivering the e-mail to the intended recipient, you are hereby notified that any use, copying, distributing, dissemination, forwarding, printing, or copying of this e-mail is strictly prohibited. If you received this e-mail in error, please return the e-mail to the sender, delete it from your computer, and destroy any printed copy of it. |
From: steve f. <st...@fr...> - 2022-12-23 01:00:11
|
Greetings tcpreplay-users, I am having varying results when using tcpreplay to inject a UDP packet capture via tap0, on various Linux systems. My use case is perhaps non-standard because I'm not interested in putting packets on the wire, I want to inject them into the "ip_rcv()" code in the kernel with the idea of having them reach an application program running on the same machine via a socket it has bound to the proper port, in this case, UDP/4431 on eth0. My basic invocation is: tcpreplay -i tap0 4431-rewrite.pcap # 4431-rewrite.pcap contains 1 UDP packet -> port 4431 During prep, I use tcprewrite to rewrite the packet - my sense of the rewriting is: * destination MAC is rewritten with the MAC of tap0 The source IP should not matter, so no rewrite required. In this case, the original destination IP is that of eth0, so no rewrite required, but if I wanted to play it back to another interface, the destination IP would be rewritten to that of the interface in question. I'm hoping that someone can confirm that this general philosophy is correct, and sufficient, and there are no other rewrites that I need to be considering. This works properly on Ubuntu-20 kernel 5.4, with tcpreplay 4.3.2, however tcpreplay latest version 4.4.2 does not result in the application receiving the packet. According to strace, the sequence of and arguments to; open(), ioctl(), and write() on /dev/net/tun is the same in all cases. Also, on kernel 4.9, tcpreplay 4.2.6 fails to deliver a packet in about 1 in 4 runs, and tcpreplay 4.3.2 fails in about 1 in 8 runs. Also, on kernel 4.9, instead of writing the packet and exiting "instantly" (as with kernel 5.4), there is a 1-second pause before tcpreplay exits - in all cases. I have not yet tried 4.4.2 (latest) on kernel 4.9, but I know it doesn't produce the desired result on kernel 5.4. I'm hoping that there's a pattern here - something that I'm not seeing that maybe the developers are familiar with. Thank you for your consideration, Regards, Steve |
From: Gabriel G. <gab...@gm...> - 2022-12-14 16:24:23
|
To reconfigure, just run the configure script again. Usually on first build: ./autogen.sh mkdir build && cd build ../configure [your options ...] make Then for consecutive builds, go to the build directory ../configure [options...] # if you changed the env or the conf make If it doesn't work, please look at the file config.log And share the part about fragroute. On Wed, Dec 14, 2022 at 5:14 PM Said Binn <sa...@gm...> wrote: > I already have that particular library installed > > sudo apt install libdumbnet-dev > Reading package lists... Done > Building dependency tree... Done > Reading state information... Done > libdumbnet-dev is already the newest version (1.12-10). > 0 upgraded, 0 newly installed, 0 to remove and 17 not upgraded. > > How can I manually reconfigure when I already have the library installed. > > On Wed, Dec 14, 2022 at 9:57 AM Gabriel Ganne <gab...@gm...> > wrote: > >> Hi, >> >> To enable the fragroute engine, you need to have libdumbnet installed. >> On debian-based distrib, this is "apt install libdumbnet-dev". >> There is a comment with more details here: >> https://github.com/appneta/tcpreplay/blob/master/configure.ac#L1472 >> >> Then you re-configure and you should see in the summary. >> fragroute support: yes >> Then build and tcprewrite should be compiled with the feature. >> >> Note that for fragmenting IP packets, you can also use >> https://github.com/seladb/PcapPlusPlus/tree/v22.11/Examples/IPFragUtil >> I'm not sure what you're trying to do, so disregard if it doesn't help. >> >> Best regards, >> >> On Wed, Dec 14, 2022 at 3:47 PM Said Binn <sa...@gm...> wrote: >> >>> Please help me. I am trying to use tcprewrite to fragment a high MTU >>> pcap stream however tcprewrite fails to recognize the fragroute engine and >>> that is because the engine seems to be not enabled. How can I enable this >>> engine? >>> >>> saidbin@ubuntu:~/.../pcaps$ tcprewrite -V >>> tcprewrite version: 4.3.4 (build git:v4.3.4) (debug) >>> Copyright 2013-2018 by Fred Klassen <tcpreplay at appneta dot com> - >>> AppNeta >>> Copyright 2000-2012 by Aaron Turner <aturner at synfin dot net> >>> The entire Tcpreplay Suite is licensed under the GPLv3 >>> Cache file supported: 04 >>> Not compiled with libdnet. >>> Compiled against libpcap: 1.10.1 >>> 64 bit packet counters: enabled >>> Verbose printing via tcpdump: enabled >>> Fragroute engine: disabled <---------- how can I enable >>> this engine. >>> >>> Google search is not yielding any valuable result. >>> >>> Thanks >>> Said >>> _______________________________________________ >>> Tcpreplay-users mailing list >>> Tcp...@li... >>> https://lists.sourceforge.net/lists/listinfo/tcpreplay-users >>> Support Information: http://tcpreplay.synfin.net/trac/wiki/Support >> >> >> >> -- >> Gabriel Ganne >> _______________________________________________ >> Tcpreplay-users mailing list >> Tcp...@li... >> https://lists.sourceforge.net/lists/listinfo/tcpreplay-users >> Support Information: http://tcpreplay.synfin.net/trac/wiki/Support > > _______________________________________________ > Tcpreplay-users mailing list > Tcp...@li... > https://lists.sourceforge.net/lists/listinfo/tcpreplay-users > Support Information: http://tcpreplay.synfin.net/trac/wiki/Support -- Gabriel Ganne |
From: Said B. <sa...@gm...> - 2022-12-14 16:14:04
|
I already have that particular library installed sudo apt install libdumbnet-dev Reading package lists... Done Building dependency tree... Done Reading state information... Done libdumbnet-dev is already the newest version (1.12-10). 0 upgraded, 0 newly installed, 0 to remove and 17 not upgraded. How can I manually reconfigure when I already have the library installed. On Wed, Dec 14, 2022 at 9:57 AM Gabriel Ganne <gab...@gm...> wrote: > Hi, > > To enable the fragroute engine, you need to have libdumbnet installed. > On debian-based distrib, this is "apt install libdumbnet-dev". > There is a comment with more details here: > https://github.com/appneta/tcpreplay/blob/master/configure.ac#L1472 > > Then you re-configure and you should see in the summary. > fragroute support: yes > Then build and tcprewrite should be compiled with the feature. > > Note that for fragmenting IP packets, you can also use > https://github.com/seladb/PcapPlusPlus/tree/v22.11/Examples/IPFragUtil > I'm not sure what you're trying to do, so disregard if it doesn't help. > > Best regards, > > On Wed, Dec 14, 2022 at 3:47 PM Said Binn <sa...@gm...> wrote: > >> Please help me. I am trying to use tcprewrite to fragment a high MTU pcap >> stream however tcprewrite fails to recognize the fragroute engine and that >> is because the engine seems to be not enabled. How can I enable this engine? >> >> saidbin@ubuntu:~/.../pcaps$ tcprewrite -V >> tcprewrite version: 4.3.4 (build git:v4.3.4) (debug) >> Copyright 2013-2018 by Fred Klassen <tcpreplay at appneta dot com> - >> AppNeta >> Copyright 2000-2012 by Aaron Turner <aturner at synfin dot net> >> The entire Tcpreplay Suite is licensed under the GPLv3 >> Cache file supported: 04 >> Not compiled with libdnet. >> Compiled against libpcap: 1.10.1 >> 64 bit packet counters: enabled >> Verbose printing via tcpdump: enabled >> Fragroute engine: disabled <---------- how can I enable this >> engine. >> >> Google search is not yielding any valuable result. >> >> Thanks >> Said >> _______________________________________________ >> Tcpreplay-users mailing list >> Tcp...@li... >> https://lists.sourceforge.net/lists/listinfo/tcpreplay-users >> Support Information: http://tcpreplay.synfin.net/trac/wiki/Support > > > > -- > Gabriel Ganne > _______________________________________________ > Tcpreplay-users mailing list > Tcp...@li... > https://lists.sourceforge.net/lists/listinfo/tcpreplay-users > Support Information: http://tcpreplay.synfin.net/trac/wiki/Support |
From: Gabriel G. <gab...@gm...> - 2022-12-14 15:57:40
|
Hi, To enable the fragroute engine, you need to have libdumbnet installed. On debian-based distrib, this is "apt install libdumbnet-dev". There is a comment with more details here: https://github.com/appneta/tcpreplay/blob/master/configure.ac#L1472 Then you re-configure and you should see in the summary. fragroute support: yes Then build and tcprewrite should be compiled with the feature. Note that for fragmenting IP packets, you can also use https://github.com/seladb/PcapPlusPlus/tree/v22.11/Examples/IPFragUtil I'm not sure what you're trying to do, so disregard if it doesn't help. Best regards, On Wed, Dec 14, 2022 at 3:47 PM Said Binn <sa...@gm...> wrote: > Please help me. I am trying to use tcprewrite to fragment a high MTU pcap > stream however tcprewrite fails to recognize the fragroute engine and that > is because the engine seems to be not enabled. How can I enable this engine? > > saidbin@ubuntu:~/.../pcaps$ tcprewrite -V > tcprewrite version: 4.3.4 (build git:v4.3.4) (debug) > Copyright 2013-2018 by Fred Klassen <tcpreplay at appneta dot com> - > AppNeta > Copyright 2000-2012 by Aaron Turner <aturner at synfin dot net> > The entire Tcpreplay Suite is licensed under the GPLv3 > Cache file supported: 04 > Not compiled with libdnet. > Compiled against libpcap: 1.10.1 > 64 bit packet counters: enabled > Verbose printing via tcpdump: enabled > Fragroute engine: disabled <---------- how can I enable this > engine. > > Google search is not yielding any valuable result. > > Thanks > Said > _______________________________________________ > Tcpreplay-users mailing list > Tcp...@li... > https://lists.sourceforge.net/lists/listinfo/tcpreplay-users > Support Information: http://tcpreplay.synfin.net/trac/wiki/Support -- Gabriel Ganne |
From: Said B. <sa...@gm...> - 2022-12-14 14:47:24
|
Please help me. I am trying to use tcprewrite to fragment a high MTU pcap stream however tcprewrite fails to recognize the fragroute engine and that is because the engine seems to be not enabled. How can I enable this engine? saidbin@ubuntu:~/.../pcaps$ tcprewrite -V tcprewrite version: 4.3.4 (build git:v4.3.4) (debug) Copyright 2013-2018 by Fred Klassen <tcpreplay at appneta dot com> - AppNeta Copyright 2000-2012 by Aaron Turner <aturner at synfin dot net> The entire Tcpreplay Suite is licensed under the GPLv3 Cache file supported: 04 Not compiled with libdnet. Compiled against libpcap: 1.10.1 64 bit packet counters: enabled Verbose printing via tcpdump: enabled Fragroute engine: disabled <---------- how can I enable this engine. Google search is not yielding any valuable result. Thanks Said |
From: Joseph H. <jha...@be...> - 2022-12-13 19:36:34
|
I downloaded netmap http://info.iet.unipi.it/~luigi/netmap/doc/20131019-netmap.tgz and did a make on the root directory. and i get: no rule to make target `/root/netmap-release/LINUX/forcedeth.c' needed by `/root/netmap-relase/LINUX/forcedeth.o' Stop. make[1]: *** [_module_/root/netmap-relase/LINUX] Error2 If there is anyone that can help I would appreciate it. |
From: Miguel G. P. <par...@ho...> - 2022-11-30 12:09:42
|
Good morning, hope you're doing well: I'm having a weird issue with TCPreplay and maybe it could be a bug. I tried to reproduce a pcap that I previously cut with wireshark. It seems there's no errors (I tried pcapfix, tshark -r and tcpcapinfo). I also tried looked for the 0x10 ffff as you say in one of your FAQs but it is correct too. Can you please tell me what am I doing wrong? Is there any other way to reproduce packets with MTUs bigger than 1500? I tried it with version 4.3.4 and 4.4.2-1. [cid:880177ed-457d-4ca5-91a0-d1595550890f] [cid:211bdf45-6412-4f8f-961e-a4b0826c2beb] [cid:af9d54f7-c93b-4809-8a0f-bccd33a384cf] Yours sinceresly, Miguel. |
From: Aaron T. <syn...@gm...> - 2022-08-27 17:50:13
|
Nice! Keep up the good work Fred! -- Aaron Turner https://synfin.net/ My father once told me that respect for the truth comes close to being the basis for all morality. "Something cannot emerge from nothing," he said. This is profound thinking if you understand how unstable "the truth" can be. -- Frank Herbert, Dune On Fri, Aug 26, 2022 at 3:38 PM Fred Klassen via Tcpreplay-users <tcp...@li...> wrote: > > Announcing Tcpreplay 4.4.2. > > This release contains bug fixes only. Full details available here https://github.com/appneta/tcpreplay/releases/tag/v4.4.2 > > Fred Klassen > Master Engineer > Broadcom Inc. > -- > This electronic communication and the information and any files transmitted > with it, or attached to it, are confidential and are intended solely for > the use of the individual or entity to whom it is addressed and may contain > information that is confidential, legally privileged, protected by privacy > laws, or otherwise restricted from disclosure to anyone else. If you are > not the intended recipient or the person responsible for delivering the > e-mail to the intended recipient, you are hereby notified that any use, > copying, distributing, dissemination, forwarding, printing, or copying of > this e-mail is strictly prohibited. If you received this e-mail in error, > please return the e-mail to the sender, delete it from your computer, and > destroy any printed copy of it. > _______________________________________________ > Tcpreplay-users mailing list > Tcp...@li... > https://lists.sourceforge.net/lists/listinfo/tcpreplay-users > Support Information: http://tcpreplay.synfin.net/trac/wiki/Support |
From: Fred K. <fre...@br...> - 2022-08-26 22:37:52
|
Announcing Tcpreplay 4.4.2. This release contains bug fixes only. Full details available here https://github.com/appneta/tcpreplay/releases/tag/v4.4.2 Fred Klassen Master Engineer Broadcom Inc. -- This electronic communication and the information and any files transmitted with it, or attached to it, are confidential and are intended solely for the use of the individual or entity to whom it is addressed and may contain information that is confidential, legally privileged, protected by privacy laws, or otherwise restricted from disclosure to anyone else. If you are not the intended recipient or the person responsible for delivering the e-mail to the intended recipient, you are hereby notified that any use, copying, distributing, dissemination, forwarding, printing, or copying of this e-mail is strictly prohibited. If you received this e-mail in error, please return the e-mail to the sender, delete it from your computer, and destroy any printed copy of it. |
From: Fred K. <fre...@br...> - 2022-08-07 16:13:09
|
Available here https://github.com/appneta/tcpreplay/releases/tag/v4.4.2-beta1 <https://github.com/appneta/tcpreplay/releases/tag/v4.4.2-beta1> This version contains fixes only. - heap-overflow in get_l2len_protocol (#735) - replaying on a loopback interface is broken (#732) - replay edit with both --loop and --preload_pcap options (#729) - test suite bus error on armhf (#725) - format string vulnerability in fix_ipv6_checksums (#723) - heap-overflow in parse_mpls (#719) - heap-overflow in get_ipv6_next (#718) - reachable assertion in get_layer4_v6 (#717) - heap buffer overflow in get_l2len_protocol (#716) - remove bash-only test in configure script (#714) Fred Klassen. -- This electronic communication and the information and any files transmitted with it, or attached to it, are confidential and are intended solely for the use of the individual or entity to whom it is addressed and may contain information that is confidential, legally privileged, protected by privacy laws, or otherwise restricted from disclosure to anyone else. If you are not the intended recipient or the person responsible for delivering the e-mail to the intended recipient, you are hereby notified that any use, copying, distributing, dissemination, forwarding, printing, or copying of this e-mail is strictly prohibited. If you received this e-mail in error, please return the e-mail to the sender, delete it from your computer, and destroy any printed copy of it. |
From: Christoph B. <sou...@ma...> - 2022-05-01 16:48:41
|
Christoph Biedl wrote... > This was introduced somewhat lately. I cannot bisect here, somethings > broken in the toolchain or how I use it. More on that below ... It seems this was introduced in 89ca664941301ac9f91b218aec1a63b8acb93cce is the first bad commit commit 89ca664941301ac9f91b218aec1a63b8acb93cce Author: Fred Klassen <fkl...@ap...> Date: Thu Jul 1 22:53:19 2021 -0700 Bug #677 more accurate is_unicast_ethernet() or more precisely, the change in src/common/get.c:339 looks like it doesn't do what it's supposed to do. Aside from that, did I fail to find the instructions how to build tcpreplay from an arbitrary git commit? Since ./configure is part of a release tar ball only, the instructions in INSTALL are not sufficient, nor is "autoreconf -f -i" which I usually do then: Since ./configure requires the generated option parser files by default, but generating them does not happen prior to the build *scratches head* So I ended up with autoreconf -f -i sed -i -e 's:s/\^\\-I/:s/^.*\\-I/:' configure # another story ./configure --disable-local-libopts --enable-pcapconfig --enable-debug make ... but quite frankly this feels terribly wrong. Christoph |
From: Christoph B. <sou...@ma...> - 2022-04-29 19:16:32
|
Tony E wrote... > Anyways, thanks for pointing out the packet to me, it helped locate the > issue. How did you locate the first packet that gave the error #887 ? Assume the first problematic frame is within the first 1024 ones, so create an according subset: editcap -r maccdc2012_00000.pcap short.pcap 1-1024 Confirm hypthesis, then start bisecting on the range Regarding your other question: > > That packet contains Spanning-Tree Protocol. > > > > Can tcpreplay process STP or other control plane protocols? Since 4.3.3 (which I tried first) shows no issues, I'd assume it's rather a regression. Christoph |
From: Tony E <ant...@gm...> - 2022-04-29 16:17:09
|
I just filtered spanning-tree out of a small sample file that normally causes the Warnings.... and no more Warnings. I'm happy I get a nice clean run now but still would like to know why we can't replay STP using tcpreplay. I was just thinking that there might be a valid use case by injecting stp and seeing how the switches react. Anyways, thanks for pointing out the packet to me, it helped locate the issue. How did you locate the first packet that gave the error #887 ? On Fri, Apr 29, 2022 at 12:00 PM Tony E <ant...@gm...> wrote: > That packet contains Spanning-Tree Protocol. > > Can tcpreplay process STP or other control plane protocols? > > Should I run my PCAPs through a filter to remove all control plane > protocols? > > On Fri, Apr 29, 2022 at 11:46 AM Christoph Biedl < > sou...@ma...> wrote: > >> Tony E wrote... >> >> > I'm using tcpreplay to replay a *.pcap file and getting alot of errors >> on >> > the screen: >> > >> > Warning: Unable to process unsupported DLT Type: Ethernet (0x1) >> >> While trying to reproduce that: >> >> > The pcap file is here: >> > https://download.netresec.com/pcap/maccdc-2012/maccdc2012_00000.pcap.gz >> >> That is compressed size 331 Mbyte, uncompressed almost one Gbyte. To >> safe other people from sifting through all the 8640118 frames, #887 >> seems to be the first that triggers this message. I'll attach that one, >> in case it gets eaten somewhere, use editcap from wireshark: >> >> editcap -r maccdc2012_00000.pcap short.pcap 887 >> >> This was introduced somewhat lately. I cannot bisect here, somethings >> broken in the toolchain or how I use it. >> >> Christoph >> _______________________________________________ >> Tcpreplay-users mailing list >> Tcp...@li... >> https://lists.sourceforge.net/lists/listinfo/tcpreplay-users >> Support Information: http://tcpreplay.synfin.net/trac/wiki/Support > > |
From: Tony E <ant...@gm...> - 2022-04-29 16:01:15
|
That packet contains Spanning-Tree Protocol. Can tcpreplay process STP or other control plane protocols? Should I run my PCAPs through a filter to remove all control plane protocols? On Fri, Apr 29, 2022 at 11:46 AM Christoph Biedl < sou...@ma...> wrote: > Tony E wrote... > > > I'm using tcpreplay to replay a *.pcap file and getting alot of errors on > > the screen: > > > > Warning: Unable to process unsupported DLT Type: Ethernet (0x1) > > While trying to reproduce that: > > > The pcap file is here: > > https://download.netresec.com/pcap/maccdc-2012/maccdc2012_00000.pcap.gz > > That is compressed size 331 Mbyte, uncompressed almost one Gbyte. To > safe other people from sifting through all the 8640118 frames, #887 > seems to be the first that triggers this message. I'll attach that one, > in case it gets eaten somewhere, use editcap from wireshark: > > editcap -r maccdc2012_00000.pcap short.pcap 887 > > This was introduced somewhat lately. I cannot bisect here, somethings > broken in the toolchain or how I use it. > > Christoph > _______________________________________________ > Tcpreplay-users mailing list > Tcp...@li... > https://lists.sourceforge.net/lists/listinfo/tcpreplay-users > Support Information: http://tcpreplay.synfin.net/trac/wiki/Support |
From: Christoph B. <sou...@ma...> - 2022-04-29 15:45:38
|
Tony E wrote... > I'm using tcpreplay to replay a *.pcap file and getting alot of errors on > the screen: > > Warning: Unable to process unsupported DLT Type: Ethernet (0x1) While trying to reproduce that: > The pcap file is here: > https://download.netresec.com/pcap/maccdc-2012/maccdc2012_00000.pcap.gz That is compressed size 331 Mbyte, uncompressed almost one Gbyte. To safe other people from sifting through all the 8640118 frames, #887 seems to be the first that triggers this message. I'll attach that one, in case it gets eaten somewhere, use editcap from wireshark: editcap -r maccdc2012_00000.pcap short.pcap 887 This was introduced somewhat lately. I cannot bisect here, somethings broken in the toolchain or how I use it. Christoph |
From: Tony E <ant...@gm...> - 2022-04-29 14:14:24
|
Hello mailing list, my name is Tony. I'm having the issue below. I read posting an issue like this on Github would be frowned-upon and best to use the mailing list. I hope this is the right place, cheers :) I'm using tcpreplay to replay a *.pcap file and getting alot of errors on the screen: Warning: Unable to process unsupported DLT Type: Ethernet (0x1) I'm using the command: tcpreplay -i [interface] [filename.pcap] The pcap contains only 1 linktype: Ethernet (0x01) The pcap file is here: https://download.netresec.com/pcap/maccdc-2012/maccdc2012_00000.pcap.gz I unziped the capture file, which produces a compressed capture file. I've unzipped that also, giving me a raw uncompressed capture file. I use other captures with tcpreplay without any issues. Also, this capture file in question opens fine and processes in other packet analysis tools: Wireshark or tcpdump tcpreplay is latest from git. on Centos7 Is there anyway I can fix this or sus-out which packets/frames are causing the errors and remove them from the capture? How can I troubleshoot this? |
From: Fred K. <fkl...@ap...> - 2022-01-31 05:14:01
|
I’m happy to announce 4.4.0. New features added and bugs fixed: - remove obsolete FORCE_ALIGN support to fix macOS 11 compile (#695) - add a security policy document (#689) - ability to specify directory of pcap files (#682) - incorrect PPS rate for long-running sessions (#679) - option --skipbroadcast not working (#677) - revert #630 to fix --multiplier issues (#674) - gcc 9.3 compiler warnings (#670) - installed netmap not automatically detected (#669) - latest macOS SDK selected by default (#668) - heap-buffer-overflow with flow_decode() (#665) - add feature VLAN Q-in-Q (#625) - add feature update Ethernet MAC on multicast IP (#563) The release is available here https://github.com/appneta/tcpreplay/releases/tag/v4.4.0 <https://github.com/appneta/tcpreplay/releases/tag/v4.4.0> Fred Klassen - Tcpreplay maintainer Founder and VP Advanced Technology AppNeta Inc. |
From: Aaron T. <syn...@gm...> - 2021-06-12 03:10:04
|
Hi Alex, tcpliveplay is _extremely_ basic and doesn't support nearly as many options as tcpreplay does. It also only sorta works. Hence, what you're asking for isn't really possible. -- Aaron Turner https://synfin.net/ Twitter: @synfinatic My father once told me that respect for the truth comes close to being the basis for all morality. "Something cannot emerge from nothing," he said. This is profound thinking if you understand how unstable "the truth" can be. -- Frank Herbert, Dune On Fri, Jun 11, 2021 at 12:07 PM Alex Poloniewicz <ale...@gm...> wrote: > > Hi Guys, > > Apologies if this is a silly question, but I'm fascinated in trying to replay recorded pcaps in a stateful manner and thought tcpliveplay could be perfect for it. I've used tcpreplay before and don't have a problem using it, but I'm confused with how to use tcpliveplay (what command line arguments it needs). I've taken a look at the documentation along with trial and error and still can't get it to work unfortunately. What would be the tcpliveplay alternative to the following command? > > sudo tcpreplay -i ens33 -tK --loop 5000 --unique-ip test.pcap > > > Sincerely, > > Alex > _______________________________________________ > Tcpreplay-users mailing list > Tcp...@li... > https://lists.sourceforge.net/lists/listinfo/tcpreplay-users > Support Information: http://tcpreplay.synfin.net/trac/wiki/Support |