Wireshark-users: [Wireshark-users] Bittwist and TCP sequence numbers

From: jbartas <jbartas@xxxxxxxxxxxxxxxx>
Date: Tue, 15 Jan 2008 12:18:20 -0800
First off, If anyone knows a dedicated Bittwist forum where I can ask this, please point me there.

I discovered Bittwist yesterday and love how it can globally replace IP address and ports in a pcap file. Now I'm trying to modify the TCP sequence numbers, which turns out to be a bit trickier. What Bittwist does now is replace every sequence number in the TCP stream with the number I give it on the command line. This breaks the stream - the first packet looks OK, but every subsequent packet looks like a retry since they have the same seq number. What I'd like is an option to add a set value to every sequence number in a stream, and also adjust the responding ACKs.

We'll tackle writing this in-house if we have to, but first let me ask: Does this already exist? No sense reinventing the wheel.

TiA,
-JB-

--
John Bartas - Director of Network Engineering
Packet Island, Inc. www.packetisland.com
jbartas@xxxxxxxxxxxxxxxx
cell: 408-857-0605