Opened 10 years ago

#384 new enhancement

Add DOCSIS support to tcprewrite/tcpprep

Reported by: aturner Owned by: aturner
Priority: low Milestone: Future Release
Component: libtcpedit Version: 3.4.1
Keywords: Cc: owenkorkie@…
Operating System: Add to FAQ?: no
Hardware: All
Output of tcpreplay -V:


Apparently the DLT is ethernet, but the first header is DOCSIS... Wireshark requires you to manually specify docsis mode by go to Edit, Preferences, Protocols, select Frame, then Treat all frames as Docsis frames.

Docsis has a variable length header due to 0 or more extensions. Need to be able to parse this header to be able to get to the L2+ headers in the frame for decoding/editing.

Recommend a --docsis flag rather then autodetection.

Attachments (1)

TcprewriteDORA.pcap (1.5 KB) - added by aturner 10 years ago.
sample docsis pcap

Download all attachments as: .zip

Change History (1)

Changed 10 years ago by aturner

sample docsis pcap

Note: See TracTickets for help on using tickets.