flowreplay.1 5.1 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166
  1. .TH FLOWREPLAY 1 2006-08-07 "" "Programmer's Manual"
  2. .\" DO NOT EDIT THIS FILE (flowreplay.1)
  3. .\"
  4. .\" It has been AutoGen-ed Monday August 7, 2006 at 09:28:42 PM PDT
  5. .\" From the definitions flowreplay_opts.def
  6. .\" and the template file agman1.tpl
  7. .\"
  8. .SH NAME
  9. flowreplay \- Connect to servers based on network traffic stored in pcap files
  10. .SH SYNOPSIS
  11. .B flowreplay
  12. .\" Mixture of short (flag) options and long options
  13. .RB [ -\fIflag\fP " [\fIvalue\fP]]... [" --\fIopt-name\fP " [[=| ]\fIvalue\fP]]..."
  14. .br
  15. .in +8
  16. <pcap_file(s)>
  17. .PP
  18. flowreplay is a tool for using network traffic stored in pcap(3) files as
  19. the basis for replaying connections to servers.
  20. .SH "DESCRIPTION"
  21. This manual page documents, briefly, the \fBflowreplay\fP command.
  22. Please note that flowreplay is currently in \fBalpha\fP. As such, it is still
  23. very much a work in progress and currently will not work for most uses. If
  24. you have the skill and interest to help make flowreplay work better, please
  25. contact Aaron Turner.
  26. .SH OPTIONS
  27. .TP
  28. .BR -d " \fInumber\fP, " --dbug "=" \fInumber\fP
  29. Enable debugging output.
  30. This option may appear up to 1 times.
  31. This option takes an integer number as its argument.
  32. The value of \fInumber\fP is constrained to being:
  33. .in +4
  34. .nf
  35. .na
  36. in the range 0 through 5
  37. .fi
  38. .in -4
  39. The default \fInumber\fP for this option is:
  40. .ti +4
  41. 0
  42. .sp
  43. If configured with --enable-debug, then you can specify a verbosity
  44. level for debugging output. Higher numbers increase verbosity.
  45. .TP
  46. .BR -v ", " --verbose
  47. Print decoded packets via tcpdump to STDOUT.
  48. This option may appear up to 1 times.
  49. .sp
  50. .TP
  51. .BR -A " \fIstring\fP, " --decode "=" \fIstring\fP
  52. Arguments passed to tcpdump decoder.
  53. This option may appear up to 1 times.
  54. This option must appear in combination with the following options:
  55. verbose.
  56. .sp
  57. When enabling verbose mode (\fB-v\fP) you may also specify one or more
  58. additional arguments to pass to \fBtcpdump\fP to modify the way packets
  59. are decoded. By default, -n and -l are used. Be sure to
  60. quote the arguments like: -A "-axxx" so that they are not interpreted
  61. by tcpreplay. The following arguments are vaild:
  62. [ -aAeNqRStuvxX ]
  63. [ -E spi@ipaddr algo:secret,... ]
  64. [ -s snaplen ]
  65. .TP
  66. .BR -m " \fIstring\fP, " --mode "=" \fIstring\fP
  67. Replay mode.
  68. This option may appear up to 1 times.
  69. .sp
  70. Flowreplay needs to know handle client/server exchanges to properly time.
  71. The options are:
  72. .sp
  73. .IR "\fBsend\fP"
  74. Replay traffic as fast as possible. Do not wait for server to reply.
  75. .sp
  76. .IR "\fBwait\fP"
  77. Wait \fB--wait\fP sec.usec for the server to reply before sending.
  78. .sp
  79. .IR "\fBbytes\fP"
  80. Wait until the server has sent the number of bytes stored in the pcap file.
  81. .sp
  82. .IR "\fBuser\fP"
  83. Send packets based on user interaction.
  84. .br
  85. .TP
  86. .BR -w " \fIstring\fP, " --wait "=" \fIstring\fP
  87. Number of sec.usec to wait between client's turn to send.
  88. This option may appear up to 1 times.
  89. .sp
  90. If \fB--mode\fP is \fBwait\fP, then you can specify the amount of time to
  91. wait for the server to complete it's side of the transaction before starting
  92. to send the client side again.
  93. .TP
  94. .BR -t " \fIstring\fP, " --targetip "=" \fIstring\fP
  95. Target host to connect to.
  96. This option may appear up to 1 times.
  97. .sp
  98. This option has not been fully documented.
  99. .TP
  100. .BR -f " \fIstring\fP, " --filter "=" \fIstring\fP
  101. BPF filter to limit which flows are replayed.
  102. This option may appear up to 1 times.
  103. .sp
  104. .TP
  105. .BR -c " \fIstring\fP, " --clientnet "=" \fIstring\fP
  106. Client network(s).
  107. .sp
  108. This option has not been fully documented.
  109. .TP
  110. .BR -s " \fIstring\fP, " --servernet "=" \fIstring\fP
  111. Server network(s).
  112. .sp
  113. This option has not been fully documented.
  114. .TP
  115. .BR -n ", " --nosyn
  116. Disable Syn packet requirement to start connections.
  117. .sp
  118. This option has not been fully documented.
  119. .TP
  120. .BR -l " \fIstring\fP, " --slimit "=" \fIstring\fP
  121. Service limit to proto/port.
  122. .sp
  123. This option has not been fully documented.
  124. .TP
  125. .BR -V ", " --version
  126. Print version information.
  127. .sp
  128. .TP
  129. .BR -h ", " --less-help
  130. Display less usage information and exit.
  131. .sp
  132. .TP
  133. .BR \-H , " \--help"
  134. Display usage information and exit.
  135. .TP
  136. .BR \-! , " \--more-help"
  137. Extended usage information passed thru pager.
  138. .TP
  139. .BR \- " [\fIrcfile\fP]," " \--save-opts" "[=\fIrcfile\fP]"
  140. Save the option state to \fIrcfile\fP. The default is the \fIlast\fP
  141. configuration file listed in the \fBOPTION PRESETS\fP section, below.
  142. .TP
  143. .BR \- " \fIrcfile\fP," " \--load-opts" "=\fIrcfile\fP," " --no-load-opts"
  144. Load options from \fIrcfile\fP.
  145. The \fIno-load-opts\fP form will disable the loading
  146. of earlier RC/INI files. \fI--no-load-opts\fP is handled early,
  147. out of order.
  148. .SH OPTION PRESETS
  149. Any option that is not marked as \fInot presettable\fP may be preset
  150. by loading values from configuration ("RC" or ".INI") file(s).
  151. The \fIhomerc\fP file is "\fI$$/\fP", unless that is a directory.
  152. In that case, the file "\fI.flowreplayrc\fP"
  153. is searched for within that directory.
  154. .SH AUTHOR
  155. Copyright 2000-2005 Aaron Turner
  156. For support please use the tcpreplay-users@lists.sourceforge.net mailing list.
  157. .PP
  158. Released under the Free BSD License.
  159. .PP
  160. This manual page was \fIAutoGen\fP-erated from the \fBflowreplay\fP
  161. option definitions.