replaying captured traffic
I am hoping someone can provide wisdom regarding the dos and don'ts replaying captured traffic? Is open source tools sufficient? Can PCAPs be replayed? How is this accomplished? partial rewriting IP headers Recommended tools? Mike
On Tue, Nov 26, 2019 at 01:07:56PM -0500, harbor235 wrote:
I am hoping someone can provide wisdom regarding the dos and don'ts replaying captured traffic?
Googling 'pcap replay' yields many hits.
Is open source tools sufficient?
Can PCAPs be replayed?
This is an easy answer: https://tcpreplay.appneta.com/ https://github.com/appneta/tcpreplay etc... I've tried none of them.
How is this accomplished? partial rewriting IP headers
Recommended tools?
Mike
-- Brian Reichert <reichert@numachi.com> BSD admin/developer at large
Thanks Brian, I am with you on the easy google fu, however, weeding through the challenges and a real implementation I was hoping to leverage some lessons learned and best practices. Mike On Tue, Nov 26, 2019 at 1:19 PM Brian Reichert <reichert@numachi.com> wrote:
On Tue, Nov 26, 2019 at 01:07:56PM -0500, harbor235 wrote:
I am hoping someone can provide wisdom regarding the dos and don'ts replaying captured traffic?
Googling 'pcap replay' yields many hits.
Is open source tools sufficient?
Can PCAPs be replayed?
This is an easy answer:
https://tcpreplay.appneta.com/ https://github.com/appneta/tcpreplay
etc...
I've tried none of them.
How is this accomplished? partial rewriting IP headers
Recommended tools?
Mike
-- Brian Reichert <reichert@numachi.com> BSD admin/developer at large
On Tue, 26 Nov 2019 13:29:21 -0500, harbor235 said:
I am with you on the easy google fu, however, weeding through the challenges and a real implementation I was hoping to leverage some lessons learned and best practices.
Well, it's going to depend a *lot* on why exactly you're doing the replay. Doing a replay for forensics, doing a replay for protocol/application correctness testing, and doing a replay for throughput test load generation are 3 very different things.
participants (3)
-
Brian Reichert -
harbor235 -
Valdis Klētnieks