flowreplay(1)

flowreplay1

Replay tcp/udp flows from a pcap capture file

Usage

flowreplay [-h] -i pcapfile [{-m send | wait | bytes}] [-t targetip] [-p proto/port] [-V] [-w sec.usec]

Overview

Flowreplay is a tool for replaying client traffic to a server from files saved with tcpdump(8).

The basic operation of flowreplay is to connect to server(s) via the TCP/UDP protocols captured in the pcap file and replay the client side of the connection to the server.

Options

-h

Help.

-i

Input file (pcap format)

-m

Mode to use to know when the server is done sending. Options are 'send' as fast as you can, 'wait' for -w sec.usec, and send after recieving the previously captured number of 'bytes' from the server.

-t

The server to connect to in lieu of the IP addresses in the pcap file.

-p

The protocol and/or port to limit sending traffic on. Valid protocols are: TCP and UDP; and any port between 0 and 65535.

-V

Print version info and exit.

-w

The number of seconds and micro-seconds represented as a float to wait for the server to finish sending before sending more data. Must be used with "-m wait".

Author

Aaron Turner

The current version is packaged with tcpreplay which is available via HTTP:

http://www.sourceforge.net/projects/tcpreplay/

Bugs

Probably a lot. Some features not implimented yet. Considered alpha quality code right now.

Please send bug reports to [email protected].

From tcpreplay 2.3.3-1 in Debian 3.1 (Sarge). Parsed by carta from the page's man source.