Shulou(Shulou.com)06/01 Report--

This article will explain in detail how to use tcpreplay in Linux. The editor thinks it is very practical, so I share it with you as a reference. I hope you can get something after reading this article.

The Linux common command tcpreplay is a playback tool for pcap packages, which can replay packages captured by ethreal or wireshark tools as they are or after arbitrary modification.

Syntax format tcpreplay [parameters] [file]

Common parameter:-A-vA "nnt" means that the message is output in tcpdump style, and the timestamp, hostname, port service name are not printed. Be careful not to use the-c parameter to specify the number of printed data packets, so that fewer messages will be sent-c dual network card playback message required parameters, followed by the cache file name, which is constructed for tcpprep according to the corresponding pcap file-I dual network card playback message required parameters Specify the master interface-K to rewrite the source MAC address of the message sent from the Nic-O without testing, use the reference instance to tcpprep the ftp.pcap file and create the cache file:

[root@linux265] # tcpprep-an client-I ftp.pcap-o ftp.cache-v replay the message * a caught on the tftp server, use ethereal to grab the packet on the tftp server, and save it as a tftp.pcap file. B. Tcpprep the pcap file and make the cache file:

[root@linux265] # tcpreplay-c ftp.cache-I eth0-j eth2 ftp.pcap-R-v this is the end of the article on "how to use tcpreplay in Linux". I hope the above content can be helpful to you, so that you can learn more knowledge. if you think the article is good, please share it for more people to see.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.