123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237 |
- <!--#exec cmd="header tcpreplay" -->
- <ul>
- </ul><H2>NAME </H2><ul>
- tcpreplay - Replay network traffic stored in pcap files
- </ul><H2>SYNOPSIS </H2><ul>
- <b>tcpreplay</b>
- [<b>-<i>flag</i></b> [<i>value</i>]]... [<b>--<i>opt-name</i></b> [[=| ]<i>value</i>]]...
- <br>
- <pcap_file(s)>
- <p>
- tcpreplay is a tool for replaying network traffic from files saved with
- tcpdump or other tools which write pcap(3) files.
- </ul><H2>DESCRIPTION </H2><ul>
- This manual page documents, briefly, the <b>tcpreplay</b> command.
- The basic operation of tcpreplay is to resend all packets from the
- input file(s) at the speed at which they were recorded, or a specified
- data rate, up to as fast as the hardware is capable.
- <p>Optionally, the traffic can be split between two interfaces, written to
- files, filtered and edited in various ways, providing the means to test
- firewalls, NIDS and other network devices.
- </ul><H2>OPTIONS </H2><ul>
- <p><dl compact><dt><b>-d</b> <i>number</i>, <b>--dbug</b>=<b><i>number</i></b>
- <dd>Enable debugging output.
- This option may appear up to 1 times.
- This option takes an integer number as its argument.
- The value of <i>number</i> is constrained to being:
- <pre>
- in the range 0 through 5
- <br></pre>
- The default <i>number</i> for this option is:
- </dl><br>
- 0
- <p>
- If configured with --enable-debug, then you can specify a verbosity
- level for debugging output. Higher numbers increase verbosity.
- <p><dl compact><dt><b>-v</b>, <b>--verbose</b>
- <dd>Print decoded packets via tcpdump to STDOUT.
- This option may appear up to 1 times.
- </dl>
- <p>
- <p><p><dl compact><dt><b>-A</b> <i>string</i>, <b>--decode</b>=<b><i>string</i></b>
- <dd>Arguments passed to tcpdump decoder.
- This option may appear up to 1 times.
- This option must appear in combination with the following options:
- verbose.
- </dl>
- <p>
- When enabling verbose mode (<b>-v</b>) you may also specify one or more
- additional arguments to pass to <b>tcpdump</b> to modify the way packets
- are decoded. By default, -n and -l are used. Be sure to
- quote the arguments like: -A "-axxx" so that they are not interpreted
- by tcpreplay. The following arguments are vaild:
- [ -aAeNqRStuvxX ]
- [ -E spi@ipaddr algo:secret,... ]
- [ -s snaplen ]
- <p><dl compact><dt><b>-c</b> <i>string</i>, <b>--cachefile</b>=<b><i>string</i></b>
- <dd>Split traffic via a tcppep cache file.
- This option may appear up to 1 times.
- </dl>
- <p>
- <p><p><dl compact><dt><b>-i</b> <i>string</i>, <b>--intf1</b>=<b><i>string</i></b>
- <dd>Server/primary traffic output interface.
- This option may appear up to 1 times.
- </dl>
- <p>
- <p><p><dl compact><dt><b>-I</b> <i>string</i>, <b>--intf2</b>=<b><i>string</i></b>
- <dd>Client/secondary traffic output interface.
- This option may appear up to 1 times.
- This option must appear in combination with the following options:
- cachefile.
- </dl>
- <p>
- <p><p><dl compact><dt><b>-l</b> <i>number</i>, <b>--loop</b>=<b><i>number</i></b>
- <dd>Loop through the capture file X times.
- This option may appear up to 1 times.
- This option takes an integer number as its argument.
- The value of <i>number</i> is constrained to being:
- <pre>
- greater than or equal to 0
- <br></pre>
- The default <i>number</i> for this option is:
- </dl><br>
- 1
- <p>
- <p><p><dl compact><dt><b>-L</b>, <b>--pktlen</b>
- <dd>Override the snaplen and use the actual packet len.
- This option may appear up to 1 times.
- </dl>
- <p>
- By default, tcpreplay will send packets based on the size of the "snaplen"
- stored in the pcap file which is usually the correct thing to do. However,
- occasionally, tools will store more bytes then told to. By specifying this
- option, tcpreplay will ignore the snaplen field and instead try to send
- packets based on the original packet length. Bad things (TM) may happen if
- you specify this option.
- <p><dl compact><dt><b>-m</b> <i>string</i>, <b>--multiplier</b>=<b><i>string</i></b>
- <dd>Modify replay speed to a given multiple.
- This option may appear up to 1 times.
- This option must not appear in combination with any of the following options:
- pps, mbps, oneatatime, topspeed.
- </dl>
- <p>
- Specify a floating point value to modify the packet replay speed.
- Examples:
- <pre>
- 2.0 will replay traffic at twice the speed captured
- <br> 0.7 will replay traffic at 70% the speed captured
- <br></pre>
- <p><dl compact><dt><b>-p</b> <i>number</i>, <b>--pps</b>=<b><i>number</i></b>
- <dd>Replay packets at a given packets/sec.
- This option may appear up to 1 times.
- This option must not appear in combination with any of the following options:
- multiplier, mbps, oneatatime, topspeed.
- This option takes an integer number as its argument.
- </dl>
- <p>
- <p><p><dl compact><dt><b>-M</b> <i>string</i>, <b>--mbps</b>=<b><i>string</i></b>
- <dd>Replay packets at a given Mbps.
- This option may appear up to 1 times.
- This option must not appear in combination with any of the following options:
- multiplier, pps, oneatatime, topspeed.
- </dl>
- <p>
- Specify a floating point value for the Mbps rate that tcpreplay
- should send packets at.
- <p><dl compact><dt><b>-t</b>, <b>--topspeed</b>
- <dd>Replay packets as fast as possible.
- This option must not appear in combination with any of the following options:
- mbps, multiplier, pps, oneatatime.
- </dl>
- <p>
- <p><p><dl compact><dt><b>-o</b>, <b>--oneatatime</b>
- <dd>Replay one packet at a time for each user input.
- This option must not appear in combination with any of the following options:
- mbps, pps, multiplier, topspeed.
- </dl>
- <p>
- Allows you to step through one or more packets at a time.
- <p><dl compact><dt><b>-P</b>, <b>--pid</b>
- <dd>Print the PID of tcpreplay at startup.
- </dl>
- <p>
- <p><p><dl compact><dt><b>-V</b>, <b>--version</b>
- <dd>Print version information.
- </dl>
- <p>
- <p><p><dl compact><dt><b>-h</b>, <b>--less-help</b>
- <dd>Display less usage information and exit.
- </dl>
- <p>
- <p><p><dl compact><dt><b>-H</b>,<b> --help</b>
- <dd>Display usage information and exit.
- <dt><b>-!</b>,<b> --more-help</b>
- <dd>Extended usage information passed thru pager.
- <dt><b>-</b> [<i>rcfile</i>],<b> --save-opts</b>[=<i>rcfile</i>]
- <dd>Save the option state to <i>rcfile</i>. The default is the <i>last</i>
- configuration file listed in the <b>OPTION PRESETS</b> section, below.
- <dt><b>-</b> <i>rcfile</i>,<b> --load-opts</b>=<i>rcfile</i>,<b> --no-load-opts</b>
- <dd>Load options from <i>rcfile</i>.
- The <i>no-load-opts</i> form will disable the loading
- of earlier RC/INI files. <i>--no-load-opts</i> is handled early,
- out of order.
- </dl>
- </ul><H2>OPTION PRESETS </H2><ul>
- Any option that is not marked as <i>not presettable</i> may be preset
- by loading values from configuration ("RC" or ".INI") file(s).
- The <i>homerc</i> file is "<i>$$/</i>", unless that is a directory.
- In that case, the file "<i>.tcpreplayrc</i>"
- is searched for within that directory.
- </ul><H2>SIGNALS </H2><ul>
- tcpreplay understands the following signals:
- <p>
- <i><b>SIGUSR1</b></i>
- Suspend tcpreplay
- <p>
- <i><b>SIGCONT</b></i>
- Restart tcpreplay
- <br>
- <p>
- </ul><H2>SEE ALSO </H2><ul>
- tcpdump(1), tcpprep(1), tcprewrite(1), libnet(3)
- <p>
- </ul><H2>BUGS </H2><ul>
- tcpreplay can only send packets as fast as your computer's interface,
- processor, disk and system bus will allow.
- <p>Replaying captured traffic may simulate odd or broken conditions on your
- network and cause problems.
- <p>Some operating systems by default do not allow for forging source MAC
- addresses. Please consult your operating system's documentation and the
- tcpreplay FAQ if you experiance this issue.
- </ul><H2>AUTHOR </H2><ul>
- Copyright 2000-2005 Aaron Turner
- <p>For support please use the tcpreplay-users@lists.sourceforge.net mailing list.
- <p>
- Released under the Free BSD License.
- <p>
- This manual page was <i>AutoGen</i>-erated from the <b>tcpreplay</b>
- option definitions.
- </ul>
- <!--#exec cmd="trailer" -->
|