http://tcpreplay.synfin.net/trac/

<!DOCTYPE html
    PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
    "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en">
<head>
 <title>Tcpreplay - Trac</title><link rel="start" href="/trac/wiki" /><link rel="search" href="/trac/search" /><link rel="help" href="/trac/wiki/TracGuide" /><link rel="stylesheet" href="/trac/chrome/common/css/trac.css" type="text/css" /><link rel="stylesheet" href="/trac/chrome/common/css/wiki.css" type="text/css" /><link rel="icon" href="http://tcpreplay.synfin.net/favicon.ico" type="image/x-icon" /><link rel="shortcut icon" href="http://tcpreplay.synfin.net/favicon.ico" type="image/x-icon" /><link rel="alternate" href="/trac/wiki/WikiStart?format=txt" title="Plain Text" type="text/x-trac-wiki" /><style type="text/css">
</style>
 <script type="text/javascript" src="/trac/chrome/common/js/trac.js"></script>
</head>
<body>


<div id="banner">

<div id="header"><a id="logo" href="http://tcpreplay.synfin.net/trac/"><img src="/tcpreplay_logo2.png" width="202" height="72" alt="Tcpreplay" /></a><hr /></div>

<form id="search" action="/trac/search" method="get">
 <div>
  <label for="proj-search">Search:</label>
  <input type="text" id="proj-search" name="q" size="10" accesskey="f" value="" />
  <input type="submit" value="Search" />
  <input type="hidden" name="wiki" value="on" />
  <input type="hidden" name="changeset" value="on" />
  <input type="hidden" name="ticket" value="on" />
 </div>
</form>



<div id="metanav" class="nav"><ul><li class="first"><a href="/trac/login">Login</a></li><li><a href="/trac/settings">Settings</a></li><li><a accesskey="6" href="/trac/wiki/TracGuide">Help/Guide</a></li><li><a href="/trac/about">About Trac</a></li><li class="last"><a href="/trac/register">Register</a></li></ul></div>
</div>

<div id="mainnav" class="nav"><ul><li class="active first"><a accesskey="1" href="/trac/wiki">Wiki</a></li><li><a accesskey="2" href="/trac/timeline">Timeline</a></li><li><a accesskey="3" href="/trac/roadmap">Roadmap</a></li><li><a href="/trac/browser">Browse Source</a></li><li><a href="/trac/report">View Tickets</a></li><li><a accesskey="7" href="/trac/newticket">New Ticket</a></li><li class="last"><a accesskey="4" href="/trac/search">Search</a></li></ul></div>
<div id="main">




<div id="ctxtnav" class="nav">
 <h2>Wiki Navigation</h2>
 <ul>
  <li><a href="/trac/wiki">Start Page</a></li>
  <li><a href="/trac/wiki/TitleIndex">Title Index</a></li>
  <li><a href="/trac/wiki/tags/index">Tag Index</a></li>
  <li><a href="/trac/wiki/RecentChanges">Recent Changes</a></li>
  
   <li class="last"><a href="/trac/wiki/WikiStart?action=history">Page History</a></li>
  
 </ul>
 <hr />
</div>
<div id="content" class="wiki">
 
  
  
   <div class="wikipage">
    <div id="searchable"><h1 id="WelcometoTcpreplay">Welcome to Tcpreplay</h1>
<p>
<div class='wiki-toc'>
<h4>Table of Contents</h4>
<ol>
<li><a href="/trac/wiki/News#News">News</a></li>
<li><a href="/trac/wiki/Download#Downloads">Downloads</a></li>
<ol><li><a href="/trac/wiki/Download#Releases">Releases</a></li>
<li><a href="/trac/wiki/Download#Source">Source</a></li>
<li><a href="/trac/wiki/Download#Packages">Packages</a></li>
<li><a href="/trac/wiki/Download#TipJar">Tip Jar</a></li>
</ol>
<li><a href="/trac/wiki/Documentation#Documentation">Documentation</a></li>
<ol><li><a href="/trac/wiki/Documentation#CurrentDocumentation">Current Documentation</a></li>
<li><a href="/trac/wiki/Documentation#ManPages">Man Pages</a></li>
<li><a href="/trac/wiki/Documentation#DesignDocuments">Design Documents</a></li>
<li><a href="/trac/wiki/Documentation#Whitepapers">(White)papers</a></li>
<li><a href="/trac/wiki/Documentation#RelatedTools">Related Tools</a></li>
<li><a href="/trac/wiki/Documentation#ToolsUsingTcpreplayCode">Tools Using Tcpreplay Code</a></li>
</ol>
<li><a href="/trac/wiki/Support#TechnicalSupport">Technical Support</a></li>
<ol><li><a href="/trac/wiki/Support#Overview">Overview</a></li>
<li><a href="/trac/wiki/Support#WhatInfoWeNeed">What Info We Need</a></li>
<li><a href="/trac/wiki/Support#OpeningaTicket">Opening a Ticket</a></li>
</ol>
</ol>
</div>

</p>
<p>
Tcpreplay is a suite of BSD licensed tools written by <a class="ext-link" href="http://synfin.net"><span class="icon">Aaron Turner</span></a> for UNIX operating systems which gives you the ability to use previously captured traffic in <a class="ext-link" href="http://www.tcpdump.org"><span class="icon">libpcap format</span></a> to test a variety of network devices.  It allows you to classify traffic as client or server, rewrite Layer 2, 3 and 4 headers and finally replay the traffic back onto the network and through other devices such as switches, routers, firewalls, NIDS and IPS's.  Tcpreplay supports both single and dual NIC modes for testing both sniffing and inline devices.
</p>
<p>
Tcpreplay is used by numerous firewall, IDS, IPS and other networking vendors, enterprises, universities, labs and open source projects.  If your organization uses Tcpreplay, please let me know who you are and what you use it for so that I can continue to add features which are useful.
</p>
<h2 id="Details">Details</h2>
<p>
The Tcpreplay suite includes the following tools:
</p>
<ul><li><a class="wiki" href="/trac/wiki/tcpprep">tcpprep</a> - multi-pass pcap file pre-processor which determines packets as client or server and creates cache files used by tcpreplay and tcprewrite
</li><li><a class="wiki" href="/trac/wiki/tcprewrite">tcprewrite</a> - pcap file editor which rewrites TCP/IP and Layer 2 packet headers
</li><li><a class="wiki" href="/trac/wiki/tcpreplay">tcpreplay</a> - replays pcap files at arbitrary speeds onto the network
</li><li><a class="wiki" href="/trac/wiki/tcpbridge">tcpbridge</a> - bridge two network segments with the power of tcprewrite
</li><li><a class="wiki" href="/trac/wiki/flowreplay">flowreplay</a> - emulates a network client using a pcap file as the basis of a TCP or UDP connection (currently in alpha)
</li></ul><h2 id="Usage">Usage</h2>
<p>
Generally speaking, most people would first run tcpprep against a pcap file to create a cache file which splits traffic between client and server if they are testing an inline device like a firewall or IPS.  Then depending on their network setup and where the pcap was captured, they would use tcprewrite to edit the packets so that the device under test will examine them properly.  Finally, tcpreplay is used to replay the pcap onto the network to do the test.  For more info, check out <a class="wiki" href="/trac/wiki/UseCases">these use cases</a>.
</p>
<h2 id="Howyoucanhelp">How you can help</h2>
<ul><li><a class="ext-link" href="http://synfin.net/sock_stream/archives/87"><span class="icon">Vote for your favorite DLT's</span></a>
</li><li><a href="/trac/newticket">Report a Bug or Feature Request</a>
</li><li><a class="wiki" href="/trac/wiki/tcpeditDeveloper">Write a DLT Plugin</a>
</li><li><a class="wiki" href="/trac/wiki/Download">Test the latest Beta download</a>
</li></ul><h2 id="Info">Info</h2>
<ul><li><a class="ext-link" href="http://synfin.net/sock_stream/archives/category/tcpreplay/"><span class="icon">Tcpreplay Blog</span></a>
</li><li><a class="wiki" href="/trac/wiki/Download">Downloads</a>
</li><li><a class="wiki" href="/trac/wiki/Documentation">Documentation</a>
</li><li><a href="/trac/wiki/Support#ReportingaBug">Report a Bug/Feature Request</a>
</li><li><a class="wiki" href="/trac/wiki/MailingList">Tcpreplay Users Mailing List</a>
</li></ul></div>
   </div>
   
  
  <script type="text/javascript">
   addHeadingLinks(document.getElementById("searchable"));
  </script>
 
 
</div>

<script type="text/javascript">searchHighlight()</script>
<div id="altlinks"><h3>Download in other formats:</h3><ul><li class="first last"><a href="/trac/wiki/WikiStart?format=txt">Plain Text</a></li></ul></div>

</div>

<div id="footer">
 <hr />
 <a id="tracpowered" href="http://trac.edgewall.org/"><img src="/trac/chrome/common/trac_logo_mini.png" height="30" width="107"
   alt="Trac Powered"/></a>
 <p class="left">
  Powered by <a href="/trac/about"><strong>Trac 0.10.3.1</strong></a><br />
  By <a href="http://www.edgewall.org/">Edgewall Software</a>.
 </p>
 <p class="right">
  Visit the Trac open source project at<br /><a href="http://trac.edgewall.com/">http://trac.edgewall.com/</a>
 </p>
</div>


<center>
Hosted by: <a href="http://synfin.net/">Syn Fin dot Net</a>
</center>
<script src="http://www.google-analytics.com/urchin.js" type="text/javascript">
</script>
<script type="text/javascript">
_uacct = "UA-1153176-2";
urchinTracker();
</script>

 </body>
</html>

