tcpreplay v4.3.4 beta1 releases: Pcap editing and replay tools for *NIX and Windows
Tcpreplay is a suite of GPLv3 licensed utilities for UNIX (and Win32 under Cygwin) operating systems for editing and replaying network traffic which was previously captured by tools like tcpdump and Ethereal/Wireshark. It allows you to classify traffic as client or server, rewrite Layer 2, 3 and 4 packets and finally replay the traffic back onto the network and through other devices such as switches, routers, firewalls, NIDS and IPS’s. Tcpreplay supports both single and dual NIC modes for testing both sniffing and in-line devices.
Tcpreplay is used by numerous firewall, IDS, IPS, NetFlow and other networking vendors, enterprises, universities, labs and open source projects. If your organization uses Tcpreplay, please let us know who you are and what you use it for so that I can continue to add features which are useful.
Tcpreplay is designed to work with network hardware and normally does not penetrate deeper than Layer 2. Yazan Siam with sponsorship from Cisco developed tcpliveplay to replay TCP pcap files directly to servers. Use this utility if you want to test the entire network stack and into the application.
Features
- Edit PCAP files
- Replays PCAP files to devices under test (DUT)
- Designed for IDS/IPS
- NetFlow testing
- Up to 10GigE wire rate playback
- Flow performance testing
The Tcpreplay suite includes the following tools:
Network playback products:
- tcpreplay – replays pcap files at arbitrary speeds onto the network with an option to replay with random IP addresses
- tcpreplay-edit – replays pcap files at arbitrary speeds onto the network with numerous options to modify packets on the fly
- tcpliveplay – replays TCP network traffic stored in a pcap file on live networks in a manner that a remote server will respond to
Pcap file editors and utilities:
- tcpprep – multi-pass pcap file pre-processor which determines packets as client or server and splits them into creates output files for use by tcpreplay and tcprewrite
- tcprewrite – pcap file editor which rewrites TCP/IP and Layer 2 packet headers
- tcpbridge – bridge two network segments with the power of tcprewrite
- tcpcapinfo – raw pcap file decoder and debugger
Changelog v4.3.4 beta1
This release contains bug fixes only:
This beta release is for bug fixes only.
- Fix gcc 8.3.0 build warnings (#634)
- invalid –pps value protection (#632)
- packets slowly drift further and further behind when they should be sent (#630)
- 64 bit rollover can cause pps replay issues after several hours (#629)
- typo fixes (#626) (#627)
- DLT_NULL/DLT_LOOP support for cross-platform PF_INET6 (#624)
- armv5 Freescale compile (#623)
- heap buffer overflow in tcpreplay fast_edit_packet (#620
- heap buffer overflow in tcpreplay get_next_packet (#619)
- CVE-2020-24266 heap buffer overflow in tcpprep get_l2len (#617)
- CVE-2020-24265 heap buffer overflow in tcpprep (#616)
- fix UNUSED macro declaration (#614)
- handle malformed and unsupported packets as soft errors (#613)
- compile failure on aarch64-linux-android (#612)
- fix configure –without-libdnet (#567)
- ensure automake version is at least 1.15 (#553)
- with multiplier option only first file can be sent and hang (#472)
Demo
Source: https://github.com/appneta/