Important Notice: Our web hosting provider recently started charging us for additional visits, which was unexpected. In response, we're seeking donations. Depending on the situation, we may explore different monetization options for our Community and Expert Contributors. It's crucial to provide more returns for their expertise and offer more Expert Validated Answers or AI Validated Answers. Learn more about our hosting issue here.

Does tcpreplay support sending traffic to a server?

April 26, 2017server support tcpreplay Traffic

0

Posted

Does tcpreplay support sending traffic to a server?

1 Answer

0

Posted

If by server you mean a daemon (Unix) or service (Windows) which listens on a port (a web or mail server would be common examples), then probably not. The biggest issue is that tcpreplay doesn’t understand the state of common protocols like TCP. This means it is unable to syncronize Syn/Ack?’s to create valid TCP sessions. In theory, ICMP and UDP based protocols should work fine if the MAC and IP addresses are correct. You can fix them using tcprewrite. However, some ICMP and UDP based protocols also carry Layer 3/4 protocol information in the protocol itself (SIP is one example), so if you change the IP addresses, it may not be a valid SIP packet anymore. In such cases, you may want to try using NetDude to edit the payload of the packets. In the future, I hope to release flowreplay to allow you to replay pcap files to servers.