flowreplay

Table of Contents

  1. 3.x Online Manual
    1. About
    2. Overview
    3. Getting Tcpreplay Installed
    4. Special Instructions for Windows
    5. How Does Everything Work Together?
    6. Need Help?
  2. tcpreplay
    1. Overview
    2. Basic Usage
    3. Replaying at different speeds
    4. Replaying files multiple times
    5. Advanced Usage
    6. Choosing a Timing Method
    7. Tuning for High-Performance
  3. tcpprep
    1. Overview
    2. Details
    3. Basic Usage
    4. Skip Packets
    5. Other Options
  4. tcprewrite
    1. Overview
    2. Basic Usage
    3. Rewriting Layer 2
    4. Rewriting Layer 3
    5. Rewriting Layer 4
    6. Rewriting Layers 5-7
    7. Fragroute
  5. tcpbridge
    1. Overview
  6. flowreplay
    1. Important
    2. Overview
    3. Details
  7. Common Arguments
  8. Usage Examples
    1. Passing Traffic Through an IPS/Transparent Device
    2. Passing Traffic Through a Firewall/Router/Non-Transparent Device
    3. Rewriting TCP/UDP Ports
    4. Remove specific packets from a capture file
  9. Frequently Asked Questions
    1. General Questions
    2. Running Tcpreplay
    3. Compiling Tcpreplay
    4. Common Errors
    5. Interesting Tickets

Important

Flowreplay is dead. No future development is planned. For more information, please read this.

Overview

flowreplay has the simple goal of reading a pcap file, and taking the client side of the connection(s) and replaying that data using a standard TCP/UDP socket to connect to a server. This is because tcpreplay is unable to establish a valid TCP session with a server since it is unable to syncronize Seq/Ack numbers or maintain any TCP state.

Details

flowreplay is currently an early work in progress and doesn't really work. Right now, I'm looking for a simple method to do IP defragmentation and TCP stream reassembly. In the past, I looked at libnids, but it has a number of serious issues such as being non-thread safe and having a crappy API. Right now, I've put flowreplay development on indefinate hold while I stabilize the 3.x series.

Previous: tcpbridge | Next: Common Arguments