123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166 |
- .TH FLOWREPLAY 1 2006-08-07 "" "Programmer's Manual"
- .\" DO NOT EDIT THIS FILE (flowreplay.1)
- .\"
- .\" It has been AutoGen-ed Monday August 7, 2006 at 09:28:42 PM PDT
- .\" From the definitions flowreplay_opts.def
- .\" and the template file agman1.tpl
- .\"
- .SH NAME
- flowreplay \- Connect to servers based on network traffic stored in pcap files
- .SH SYNOPSIS
- .B flowreplay
- .\" Mixture of short (flag) options and long options
- .RB [ -\fIflag\fP " [\fIvalue\fP]]... [" --\fIopt-name\fP " [[=| ]\fIvalue\fP]]..."
- .br
- .in +8
- <pcap_file(s)>
- .PP
- flowreplay is a tool for using network traffic stored in pcap(3) files as
- the basis for replaying connections to servers.
- .SH "DESCRIPTION"
- This manual page documents, briefly, the \fBflowreplay\fP command.
- Please note that flowreplay is currently in \fBalpha\fP. As such, it is still
- very much a work in progress and currently will not work for most uses. If
- you have the skill and interest to help make flowreplay work better, please
- contact Aaron Turner.
- .SH OPTIONS
- .TP
- .BR -d " \fInumber\fP, " --dbug "=" \fInumber\fP
- Enable debugging output.
- This option may appear up to 1 times.
- This option takes an integer number as its argument.
- The value of \fInumber\fP is constrained to being:
- .in +4
- .nf
- .na
- in the range 0 through 5
- .fi
- .in -4
- The default \fInumber\fP for this option is:
- .ti +4
- 0
- .sp
- If configured with --enable-debug, then you can specify a verbosity
- level for debugging output. Higher numbers increase verbosity.
- .TP
- .BR -v ", " --verbose
- Print decoded packets via tcpdump to STDOUT.
- This option may appear up to 1 times.
- .sp
- .TP
- .BR -A " \fIstring\fP, " --decode "=" \fIstring\fP
- Arguments passed to tcpdump decoder.
- This option may appear up to 1 times.
- This option must appear in combination with the following options:
- verbose.
- .sp
- When enabling verbose mode (\fB-v\fP) you may also specify one or more
- additional arguments to pass to \fBtcpdump\fP to modify the way packets
- are decoded. By default, -n and -l are used. Be sure to
- quote the arguments like: -A "-axxx" so that they are not interpreted
- by tcpreplay. The following arguments are vaild:
- [ -aAeNqRStuvxX ]
- [ -E spi@ipaddr algo:secret,... ]
- [ -s snaplen ]
- .TP
- .BR -m " \fIstring\fP, " --mode "=" \fIstring\fP
- Replay mode.
- This option may appear up to 1 times.
- .sp
- Flowreplay needs to know handle client/server exchanges to properly time.
- The options are:
- .sp
- .IR "\fBsend\fP"
- Replay traffic as fast as possible. Do not wait for server to reply.
- .sp
- .IR "\fBwait\fP"
- Wait \fB--wait\fP sec.usec for the server to reply before sending.
- .sp
- .IR "\fBbytes\fP"
- Wait until the server has sent the number of bytes stored in the pcap file.
- .sp
- .IR "\fBuser\fP"
- Send packets based on user interaction.
- .br
- .TP
- .BR -w " \fIstring\fP, " --wait "=" \fIstring\fP
- Number of sec.usec to wait between client's turn to send.
- This option may appear up to 1 times.
- .sp
- If \fB--mode\fP is \fBwait\fP, then you can specify the amount of time to
- wait for the server to complete it's side of the transaction before starting
- to send the client side again.
- .TP
- .BR -t " \fIstring\fP, " --targetip "=" \fIstring\fP
- Target host to connect to.
- This option may appear up to 1 times.
- .sp
- This option has not been fully documented.
- .TP
- .BR -f " \fIstring\fP, " --filter "=" \fIstring\fP
- BPF filter to limit which flows are replayed.
- This option may appear up to 1 times.
- .sp
- .TP
- .BR -c " \fIstring\fP, " --clientnet "=" \fIstring\fP
- Client network(s).
- .sp
- This option has not been fully documented.
- .TP
- .BR -s " \fIstring\fP, " --servernet "=" \fIstring\fP
- Server network(s).
- .sp
- This option has not been fully documented.
- .TP
- .BR -n ", " --nosyn
- Disable Syn packet requirement to start connections.
- .sp
- This option has not been fully documented.
- .TP
- .BR -l " \fIstring\fP, " --slimit "=" \fIstring\fP
- Service limit to proto/port.
- .sp
- This option has not been fully documented.
- .TP
- .BR -V ", " --version
- Print version information.
- .sp
- .TP
- .BR -h ", " --less-help
- Display less usage information and exit.
- .sp
- .TP
- .BR \-H , " \--help"
- Display usage information and exit.
- .TP
- .BR \-! , " \--more-help"
- Extended usage information passed thru pager.
- .TP
- .BR \- " [\fIrcfile\fP]," " \--save-opts" "[=\fIrcfile\fP]"
- Save the option state to \fIrcfile\fP. The default is the \fIlast\fP
- configuration file listed in the \fBOPTION PRESETS\fP section, below.
- .TP
- .BR \- " \fIrcfile\fP," " \--load-opts" "=\fIrcfile\fP," " --no-load-opts"
- Load options from \fIrcfile\fP.
- The \fIno-load-opts\fP form will disable the loading
- of earlier RC/INI files. \fI--no-load-opts\fP is handled early,
- out of order.
- .SH OPTION PRESETS
- Any option that is not marked as \fInot presettable\fP may be preset
- by loading values from configuration ("RC" or ".INI") file(s).
- The \fIhomerc\fP file is "\fI$$/\fP", unless that is a directory.
- In that case, the file "\fI.flowreplayrc\fP"
- is searched for within that directory.
- .SH AUTHOR
- Copyright 2000-2005 Aaron Turner
- For support please use the tcpreplay-users@lists.sourceforge.net mailing list.
- .PP
- Released under the Free BSD License.
- .PP
- This manual page was \fIAutoGen\fP-erated from the \fBflowreplay\fP
- option definitions.
|