Ethereal-users: Re: [Ethereal-users] Ethereal inverse

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: Guy Harris <guy@xxxxxxxxxx>
Date: Thu, 11 Apr 2002 12:17:53 -0700
On Thu, Apr 11, 2002 at 02:09:00PM -0400, Dave_Pfaltzgraff@xxxxxxxxxxxx wrote:
> In attempting to diagnose a communications problem, we'd like to be able to take
> an Ethereal capture file and send it out over the wire again. Has anyone wriiten
> a utility that may be able to  do this?

See "tcpreplay".

Some systems might come with it; if not, source to it is in the CVS tree
at cvs.tcpdump.org.  See

	http://www.tcpdump.org/

and look for "Anonymous CVS"; follow the instructions, except that you
pass "tcpreplay" to the "checkout" command, rather than "libpcap
tcpdump".

This probably won't work on Windows.  You'd have to port it to WinPcap
to do that.

> (Note that it is acceptable if the source MAC address is different and
> any corresponding CRC,

Ethereal capture files rarely, if ever, include the CRC, as the OS code
doesn't supply it to libpcap, so libpcap can't supply it to Ethereal.