On 7/5/08,
Hansang Bae <
hbae@xxxxxxxxxx> wrote:
miguel olivares varela wrote:
>
> Hi everybody
>
> i have pcap file and i want to add random packet lost, i tried to use
> editcap
>
> editcap -E 0.05 file.pcap file-error.pcap
>
> but i have a lot of errors not only packet lost.
>
> does anybody help me?
You can't just use editcap. If you do, you'll lose the packets and
Wireshark will flag the missing packets (prev segment lost). However,
you won't see retransmissions, fast retansmissions, triple duplicate
acks etc. If you want to see what packet loss looks like, create a
duplex mismatch and push/pull some files via ftp
The OP was trying to simulate loss in a UDP flow - therefore no retransmissions.
If editcap had the right feature this would have been a fine approach to the simulation.
-jp
--
I wouldn't be surprised if someday some fishermen caught a big shark and cut it open, and there inside was a whole person. Then they cut the person open, and in him is a little baby shark. And in the baby shark there isn't a person, because it would be too small. But there's a little doll or something, like a Johnny Combat little toy guy---something like that.
deepthoughtsbyjackhandy.com