1tcpreplay-edit(1) User Commands tcpreplay-edit(1)
2
6 tcpreplay-edit - Replay network traffic stored in pcap files
7
9 tcpreplay-edit [-flags] [-flag [value]] [--option-name[[=| ]value]]
10 <pcap_file(s)>
11 tcpreplay is a tool for replaying network traffic from files saved with
13 tcpdump or other tools which write pcap(3) files.
14
16 The basic operation of tcpreplay is to resend all packets from the
17 input file(s) at the speed at which they were recorded, or a specified
18 data rate, up to as fast as the hardware is capable.
19 Optionally, the traffic can be split between two interfaces, written to
21 files, filtered and edited in various ways, providing the means to test
22 firewalls, NIDS and other network devices.
23 For more details, please see the Tcpreplay Manual at: http://tcpre‐
25 play.appneta.com
26
28 -r string, --portmap=string
30 Rewrite TCP/UDP ports. This option may appear up to 9999 times.
31 Specify a list of comma delimited port mappings consisting of
33 colon delimited port number pairs. Each colon delimited port
34 pair consists of the port to match followed by the port number
35 to rewrite.
36 Examples:
38 --portmap=80:8000 --portmap=8080:80 # 80->8000 and 8080->80
39 --portmap=8000,8080,88888:80 # 3 different ports become 80
40 --portmap=8000-8999:80 # ports 8000 to 8999 become 80
41 -s number, --seed=number
43 Randomize src/dst IPv4/v6 addresses w/ given seed. This option
44 may appear up to 1 times. This option must not appear in combi‐
45 nation with any of the following options: fuzz-seed. This
46 option takes an integer number as its argument.
47 Causes the source and destination IPv4/v6 addresses to be pseudo
49 randomized but still maintain client/server relationships.
50 Since the randomization is deterministic based on the seed, you
51 can reuse the same seed value to recreate the traffic.
52 -N string, --pnat=string
54 Rewrite IPv4/v6 addresses using pseudo-NAT. This option may
55 appear up to 2 times. This option must not appear in combina‐
56 tion with any of the following options: srcipmap.
57 Takes a comma delimited series of colon delimited CIDR netblock
59 pairs. Each netblock pair is evaluated in order against the IP
60 addresses. If the IP address in the packet matches the first
61 netblock, it is rewritten using the second netblock as a mask
62 against the high order bits.
63 IPv4 Example:
65 --pnat=192.168.0.0/16:10.77.0.0/16,172.16.0.0/12:10.1.0.0/24
66 IPv6 Example:
67 --pnat=[2001:db8::/32]:[dead::/16],[2001:db8::/32]:[::ffff:0:0/96]
68 -S string, --srcipmap=string
70 Rewrite source IPv4/v6 addresses using pseudo-NAT. This option
71 may appear up to 1 times. This option must not appear in combi‐
72 nation with any of the following options: pnat.
73 Works just like the --pnat option, but only affects the source
75 IP addresses in the IPv4/v6 header.
76 -D string, --dstipmap=string
78 Rewrite destination IPv4/v6 addresses using pseudo-NAT. This
79 option may appear up to 1 times. This option must not appear in
80 combination with any of the following options: pnat.
81 Works just like the --pnat option, but only affects the destina‐
83 tion IP addresses in the IPv4/v6 header.
84 -e string, --endpoints=string
86 Rewrite IP addresses to be between two endpoints. This option
87 may appear up to 1 times. This option must appear in combina‐
88 tion with the following options: cachefile.
89 Takes a pair of colon delimited IPv4/v6 addresses which will be
91 used to rewrite all traffic to appear to be between the two IP
92 addresses.
93 IPv4 Example:
95 --endpoints=172.16.0.1:172.16.0.2
96 IPv6 Example:
97 --endpoints=[2001:db8::dead:beef]:[::ffff:0:0:ac:f:0:2]
98 --tcp-sequence=number
100 Change TCP Sequence (and ACK) numbers /w given seed. This
101 option takes an integer number as its argument. The value of
102 number is constrained to being:
103 greater than or equal to 1
104 The default number for this option is:
105 0
106 Change all TCP sequence numbers, and related sequence-acknowl‐
108 edgement numbers. They will be shifted by a random amount based
109 on the provided seed.
110 -b, --skipbroadcast
112 Skip rewriting broadcast/multicast IPv4/v6 addresses.
113 By default --seed, --pnat and --endpoints will rewrite broadcast
115 and multicast IPv4/v6 and MAC addresses. Setting this flag will
116 keep broadcast/multicast IPv4/v6 and MAC addresses from being
117 rewritten.
118 -C, --fixcsum
120 Force recalculation of IPv4/TCP/UDP header checksums.
121 Causes each IPv4/v6 packet to have their checksums recalculated
123 and fixed. Automatically enabled for packets modified with
124 --seed, --pnat, --endpoints or --fixlen.
125 -m number, --mtu=number
127 Override default MTU length (1500 bytes). This option may
128 appear up to 1 times. This option takes an integer number as
129 its argument. The value of number is constrained to being:
130 in the range 1 through MAXPACKET
131 Override the default 1500 byte MTU size for determining the max‐
133 imum padding length (--fixlen=pad) or when truncating (--mtu-
134 trunc).
135 --mtu-trunc
137 Truncate packets larger then specified MTU. This option may
138 appear up to 1 times.
139 Similar to --fixlen, this option will truncate data in packets
141 from Layer 3 and above to be no larger then the MTU.
142 -E, --efcs
144 Remove Ethernet checksums (FCS) from end of frames.
145 Note, this option is pretty dangerous! We do not actually check
147 to see if a FCS actually exists in the frame, we just blindly
148 delete the last 4 bytes. Hence, you should only use this if you
149 know know that your OS provides the FCS when reading raw pack‐
150 ets.
151 --ttl=string
153 Modify the IPv4/v6 TTL/Hop Limit.
154 Allows you to modify the TTL/Hop Limit of all the IPv4/v6 pack‐
156 ets. Specify a number to hard-code the value or +/-value to
157 increase or decrease by the value provided (limited to 1-255).
158 Examples:
160 --ttl=10
161 --ttl=+7
162 --ttl=-64
163 --tos=number
165 Set the IPv4 TOS/DiffServ/ECN byte. This option may appear up
166 to 1 times. This option takes an integer number as its argu‐
167 ment. The value of number is constrained to being:
168 in the range 0 through 255
169 Allows you to override the TOS (also known as DiffServ/ECN)
171 value in IPv4.
172 --tclass=number
174 Set the IPv6 Traffic Class byte. This option may appear up to 1
175 times. This option takes an integer number as its argument.
176 The value of number is constrained to being:
177 in the range 0 through 255
178 Allows you to override the IPv6 Traffic Class field.
180 --flowlabel=number
182 Set the IPv6 Flow Label. This option may appear up to 1 times.
183 This option takes an integer number as its argument. The value
184 of number is constrained to being:
185 in the range 0 through 1048575
186 Allows you to override the 20bit IPv6 Flow Label field. Has no
188 effect on IPv4 packets.
189 -F string, --fixlen=string
191 Pad or truncate packet data to match header length. This option
192 may appear up to 1 times.
193 Packets may be truncated during capture if the snaplen is
195 smaller then the packet. This option allows you to modify the
196 packet to pad the packet back out to the size stored in the
197 IPv4/v6 header or rewrite the IP header total length to reflect
198 the stored packet length.
199 pad Truncated packets will be padded out so that the packet
201 length matches the IPv4 total length
202 trunc Truncated packets will have their IPv4 total length field
204 rewritten to match the actual packet length
205 del Delete the packet
207 --fuzz-seed=number
209 Fuzz 1 in X packets. Edit bytes, length, or emulate packet drop.
210 This option takes an integer number as its argument. The value
211 of number is constrained to being:
212 greater than or equal to 0
213 The default number for this option is:
214 0
215 This fuzzing was designed as to test layer 7 protocols such as
217 voip protocols. It modifies randomly 1 out of X packets (where
218 X = --fuzz-factor) in order for stateful protocols to cover more
219 of their code. The random fuzzing actions focus on data start
220 and end because it often is the part of the data application
221 protocols base their decisions on.
222 Possible fuzzing actions list:
224 * drop packet
225 * reduce packet size
226 * edit packet Bytes:
227 * Not all Bytes have the same probability of appearance in
228 real life.
229 Replace with 0x00, 0xFF, or a random byte with equal like‐
230 lihood.
231 * Not all Bytes have the same significance in a packet.
232 Replace the start, the end, or the middle of the packet
233 with equal likelihood.
234 * do nothing (7 out of 8 packets)
235 --fuzz-factor=number
237 Set the Fuzz 1 in X packet ratio (default 1 in 8 packets). This
238 option must appear in combination with the following options:
239 fuzz-seed. This option takes an integer number as its argument.
240 The value of number is constrained to being:
241 greater than or equal to 1
242 The default number for this option is:
243 8
244 Sets the ratio of for --fuzz-seed option. By default this value
246 is 8, which means 1 in 8 packets are modified by fuzzing. Note
247 that this ratio is based on the random number generated by the
248 supplied fuzz seed. Therefore by default you cannot expect that
249 exactly every eighth packet will be modified.
250 --skipl2broadcast
252 Skip rewriting broadcast/multicast Layer 2 addresses.
253 By default, editing Layer 2 addresses will rewrite broadcast and
255 multicast MAC addresses. Setting this flag will keep broad‐
256 cast/multicast MAC addresses from being rewritten.
257 --dlt=string
259 Override output DLT encapsulation. This option may appear up to
260 1 times.
261 By default, no DLT (data link type) conversion will be made. To
263 change the DLT type of the output pcap, select one of the fol‐
264 lowing values:
265 enet Ethernet aka DLT_EN10MB
267 hdlc Cisco HDLC aka DLT_C_HDLC
269 jnpr_ether Juniper Ethernet DLT_C_JNPR_ETHER
271 pppserial PPP Serial aka DLT_PPP_SERIAL
273 user User specified Layer 2 header and DLT type
275 --enet-dmac=string
277 Override destination ethernet MAC addresses. This option may
278 appear up to 1 times.
279 Takes a pair of comma deliminated ethernet MAC addresses which
281 will replace the destination MAC address of outbound packets.
282 The first MAC address will be used for the server to client
283 traffic and the optional second MAC address will be used for the
284 client to server traffic.
285 Example:
287 --enet-dmac=00:12:13:14:15:16,00:22:33:44:55:66
288 --enet-smac=string
290 Override source ethernet MAC addresses. This option may appear
291 up to 1 times.
292 Takes a pair of comma deliminated ethernet MAC addresses which
294 will replace the source MAC address of outbound packets. The
295 first MAC address will be used for the server to client traffic
296 and the optional second MAC address will be used for the client
297 to server traffic.
298 Example:
300 --enet-smac=00:12:13:14:15:16,00:22:33:44:55:66
301 --enet-subsmac=string
303 Substitute MAC addresses. This option may appear up to 9999
304 times.
305 Allows you to rewrite ethernet MAC addresses of packets. It
307 takes comma delimited pair or MACs address and rewrites all
308 occurrences of the first MAC with the value of the second MAC.
309 Example:
310 --enet-subsmac=00:12:13:14:15:16,00:22:33:44:55:66
311 --enet-mac-seed=number
313 Randomize MAC addresses. This option may appear up to 1 times.
314 This option must not appear in combination with any of the fol‐
315 lowing options: enet-smac, enet-dmac, enet-subsmac. This option
316 takes an integer number as its argument.
317 Allows you to randomize ethernet MAC addresses of packets,
319 mostly like what --seed option does for IPv4/IPv6 addresses.
320 --enet-mac-seed-keep-bytes=number
322 Randomize MAC addresses. This option may appear up to 1 times.
323 This option must appear in combination with the following
324 options: enet-mac-seed. This option takes an integer number as
325 its argument. The value of number is constrained to being:
326 in the range 1 through 6
327 Keep some bytes untouched when usinging --enet-mac-seed option.
329 --enet-vlan=string
331 Specify ethernet 802.1q VLAN tag mode. This option may appear
332 up to 1 times.
333 Allows you to rewrite ethernet frames to add a 802.1q header to
335 standard 802.3 ethernet headers or remove the 802.1q VLAN tag
336 information.
337 add Rewrites the existing 802.3 ethernet header as an 802.1q
339 VLAN header
340 del Rewrites the existing 802.1q VLAN header as an 802.3 ether‐
342 net header
343 --enet-vlan-tag=number
345 Specify the new ethernet 802.1q VLAN tag value. This option may
346 appear up to 1 times. This option must appear in combination
347 with the following options: enet-vlan. This option takes an
348 integer number as its argument. The value of number is con‐
349 strained to being:
350 in the range 0 through 4095
351 --enet-vlan-cfi=number
354 Specify the ethernet 802.1q VLAN CFI value. This option may
355 appear up to 1 times. This option must appear in combination
356 with the following options: enet-vlan. This option takes an
357 integer number as its argument. The value of number is con‐
358 strained to being:
359 in the range 0 through 1
360 --enet-vlan-pri=number
363 Specify the ethernet 802.1q VLAN priority. This option may
364 appear up to 1 times. This option must appear in combination
365 with the following options: enet-vlan. This option takes an
366 integer number as its argument. The value of number is con‐
367 strained to being:
368 in the range 0 through 7
369 --hdlc-control=number
372 Specify HDLC control value. This option may appear up to 1
373 times. This option takes an integer number as its argument.
374 The Cisco HDLC header has a 1 byte "control" field. Apparently
376 this should always be 0, but if you can use any 1 byte value.
377 --hdlc-address=number
379 Specify HDLC address. This option may appear up to 1 times.
380 This option takes an integer number as its argument.
381 The Cisco HDLC header has a 1 byte "address" field which has two
383 valid values:
384 0x0F Unicast
386 0xBF Broadcast
388 You can however specify any single byte value.
389 --user-dlt=number
391 Set output file DLT type. This option may appear up to 1 times.
392 This option takes an integer number as its argument.
393 Set the DLT value of the output pcap file.
395 --user-dlink=string
397 Rewrite Data-Link layer with user specified data. This option
398 may appear up to 2 times.
399 Provide a series of comma deliminated hex values which will be
401 used to rewrite or create the Layer 2 header of the packets.
402 The first instance of this argument will rewrite both server and
403 client traffic, but if this argument is specified a second time,
404 it will be used for the client traffic.
405 Example:
407 --user-dlink=01,02,03,04,05,06,00,1A,2B,3C,4D,5E,6F,08,00
408 -d number, --dbug=number
410 Enable debugging output. This option may appear up to 1 times.
411 This option takes an integer number as its argument. The value
412 of number is constrained to being:
413 in the range 0 through 5
414 The default number for this option is:
415 0
416 If configured with --enable-debug, then you can specify a ver‐
418 bosity level for debugging output. Higher numbers increase ver‐
419 bosity.
420 -q, --quiet
422 Quiet mode.
423 Print nothing except the statistics at the end of the run
425 -T string, --timer=string
427 Select packet timing mode: select, ioport, gtod, nano. This
428 option may appear up to 1 times. The default string for this
429 option is:
430 gtod
431 Allows you to select the packet timing method to use:
433 nano - Use nanosleep() API
435 select - Use select() API
437 ioport - Write to the i386 IO Port 0x80
439 gtod [default] - Use a gettimeofday() loop
441 --maxsleep=number
443 Sleep for no more then X milliseconds between packets. This
444 option takes an integer number as its argument. The default
445 number for this option is:
446 0
447 Set a limit for the maximum number of milliseconds that tcpre‐
449 play will sleep between packets. Effectively prevents long
450 delays between packets without effecting the majority of pack‐
451 ets. Default is disabled.
452 -v, --verbose
454 Print decoded packets via tcpdump to STDOUT. This option may
455 appear up to 1 times.
456 -A string, --decode=string
459 Arguments passed to tcpdump decoder. This option may appear up
460 to 1 times. This option must appear in combination with the
461 following options: verbose.
462 When enabling verbose mode (-v) you may also specify one or more
464 additional arguments to pass to tcpdump to modify the way pack‐
465 ets are decoded. By default, -n and -l are used. Be sure to
466 quote the arguments like: -A "-axxx" so that they are not inter‐
467 preted by tcpreplay. Please see the tcpdump(1) man page for a
468 complete list of options.
469 -K, --preload-pcap
471 Preloads packets into RAM before sending.
472 This option loads the specified pcap(s) into RAM before starting
474 to send in order to improve replay performance while introducing
475 a startup performance hit. Preloading can be used with or with‐
476 out --loop. This option also suppresses flow statistics collec‐
477 tion for every iteration, which can significantly reduce memory
478 usage. Flow statistics are predicted based on options supplied
479 and statistics collected from the first loop iteration.
480 -c string, --cachefile=string
482 Split traffic via a tcpprep cache file. This option may appear
483 up to 1 times. This option must appear in combination with the
484 following options: intf2. This option must not appear in combi‐
485 nation with any of the following options: dualfile.
486 If you have a pcap file you would like to use to send bi-direc‐
488 tional traffic through a device (firewall, router, IDS, etc)
489 then using tcpprep you can create a cachefile which tcpreplay
490 will use to split the traffic across two network interfaces.
491 -2, --dualfile
493 Replay two files at a time from a network tap. This option may
494 appear up to 1 times. This option must appear in combination
495 with the following options: intf2. This option must not appear
496 in combination with any of the following options: cachefile.
497 If you captured network traffic using a network tap, then you
499 can end up with two pcap files- one for each direction. This
500 option will replay these two files at the same time, one on each
501 interface and inter-mix them using the timestamps in each.
502 -i string, --intf1=string
504 Client to server/RX/primary traffic output interface. This
505 option may appear up to 1 times.
506 Required network interface used to send either all traffic or
508 traffic which is marked as 'primary' via tcpprep. Primary traf‐
509 fic is usually client-to-server or inbound (RX) on khial virtual
510 interfaces.
511 -I string, --intf2=string
513 Server to client/TX/secondary traffic output interface. This
514 option may appear up to 1 times.
515 Optional network interface used to send traffic which is marked
517 as 'secondary' via tcpprep. Secondary traffic is usually
518 server-to-client or outbound (TX) on khial virtual interfaces.
519 Generally, it only makes sense to use this option with
520 --cachefile.
521 --listnics
523 List available network interfaces and exit.
524 -l number, --loop=number
527 Loop through the capture file X times. This option may appear
528 up to 1 times. This option takes an integer number as its argu‐
529 ment. The value of number is constrained to being:
530 greater than or equal to 0
531 The default number for this option is:
532 1
533 --loopdelay-ms=number
536 Delay between loops in milliseconds. This option must appear in
537 combination with the following options: loop. This option takes
538 an integer number as its argument. The value of number is con‐
539 strained to being:
540 greater than or equal to 0
541 The default number for this option is:
542 0
543 --pktlen
546 Override the snaplen and use the actual packet len. This option
547 may appear up to 1 times.
548 By default, tcpreplay will send packets based on the size of the
550 "snaplen" stored in the pcap file which is usually the correct
551 thing to do. However, occasionally, tools will store more bytes
552 then told to. By specifying this option, tcpreplay will ignore
553 the snaplen field and instead try to send packets based on the
554 original packet length. Bad things may happen if you specify
555 this option.
556 -L number, --limit=number
558 Limit the number of packets to send. This option may appear up
559 to 1 times. This option takes an integer number as its argu‐
560 ment. The value of number is constrained to being:
561 greater than or equal to 1
562 The default number for this option is:
563 -1
564 By default, tcpreplay will send all the packets. Alternatively,
566 you can specify a maximum number of packets to send.
567 --duration=number
569 Limit the number of seconds to send. This option may appear up
570 to 1 times. This option takes an integer number as its argu‐
571 ment. The value of number is constrained to being:
572 greater than or equal to 1
573 The default number for this option is:
574 -1
575 By default, tcpreplay will send all the packets. Alternatively,
577 you can specify a maximum number of seconds to transmit.
578 -x string, --multiplier=string
580 Modify replay speed to a given multiple. This option may appear
581 up to 1 times. This option must not appear in combination with
582 any of the following options: pps, mbps, oneatatime, topspeed.
583 Specify a value to modify the packet replay speed. Examples:
585 2.0 will replay traffic at twice the speed captured
586 0.7 will replay traffic at 70% the speed captured
587 -p string, --pps=string
589 Replay packets at a given packets/sec. This option may appear
590 up to 1 times. This option must not appear in combination with
591 any of the following options: multiplier, mbps, oneatatime, top‐
592 speed.
593 Specify a value to regulate the packet replay to a specific
595 packet-per-second rate. Examples:
596 200 will replay traffic at 200 packets per second
597 0.25 will replay traffic at 15 packets per minute
598 -M string, --mbps=string
600 Replay packets at a given Mbps. This option may appear up to 1
601 times. This option must not appear in combination with any of
602 the following options: multiplier, pps, oneatatime, topspeed.
603 Specify a floating point value for the Mbps rate that tcpreplay
605 should send packets at.
606 -t, --topspeed
608 Replay packets as fast as possible. This option must not appear
609 in combination with any of the following options: mbps, multi‐
610 plier, pps, oneatatime.
611 -o, --oneatatime
614 Replay one packet at a time for each user input. This option
615 must not appear in combination with any of the following
616 options: mbps, pps, multiplier, topspeed.
617 Allows you to step through one or more packets at a time.
619 --pps-multi=number
621 Number of packets to send for each time interval. This option
622 must appear in combination with the following options: pps.
623 This option takes an integer number as its argument. The value
624 of number is constrained to being:
625 greater than or equal to 1
626 The default number for this option is:
627 1
628 When trying to send packets at very high rates, the time between
630 each packet can be so short that it is impossible to accurately
631 sleep for the required period of time. This option allows you
632 to send multiple packets at a time, thus allowing for longer
633 sleep times which can be more accurately implemented.
634 --unique-ip
636 Modify IP addresses each loop iteration to generate unique
637 flows. This option must appear in combination with the follow‐
638 ing options: loop. This option must not appear in combination
639 with any of the following options: seed, fuzz-seed.
640 Ensure IPv4 and IPv6 packets will be unique for each --loop
642 iteration. This is done in a way that will not alter packet
643 CRC, and therefore will genrally not affect performance. This
644 option will significantly increase the flows/sec over generated
645 over multiple loop iterations.
646 --unique-ip-loops=string
648 Number of times to loop before assigning new unique ip. This
649 option may appear up to 1 times. This option must appear in
650 combination with the following options: unique-ip.
651 Number of --loop iterations before a new unique IP is assigned.
653 Default is 1. Assumes both --loop and --unique-ip.
654 --netmap
656 Write packets directly to netmap enabled network adapter.
657 This feature will detect netmap capable network drivers on Linux
659 and BSD systems. If detected, the network driver is bypassed for
660 the execution duration, and network buffers will be written to
661 directly. This will allow you to achieve full line rates on com‐
662 modity network adapters, similar to rates achieved by commercial
663 network traffic generators. Note that bypassing the network
664 driver will disrupt other applications connected through the
665 test interface. See INSTALL for more information.
666 This feature can also be enabled by specifying an interface as
668 'netmap:<intf>' or 'vale:<intf>. For example 'netmap:eth0' spec‐
669 ifies netmap over interface eth0.
670 --nm-delay=number
672 Netmap startup delay. This option takes an integer number as
673 its argument. The default number for this option is:
674 10
675 Number of seconds to delay after netmap is loaded. Required to
677 ensure interfaces are fully up before netmap transmit. Requires
678 netmap option. Default is 10 seconds.
679 --no-flow-stats
681 Suppress printing and tracking flow count, rates and expira‐
682 tions.
683 Suppress the collection and printing of flow statistics. This
685 option may improve performance when not using --preload-pcap
686 option, otherwise its only function is to suppress printing.
687 The flow feature will track and print statistics of the flows
689 being sent. A flow is loosely defined as a unique combination
690 of a 5-tuple, i.e. source IP, destination IP, source port, des‐
691 tination port and protocol.
692 If --loop is specified, the flows from one iteration to the next
694 will not be unique, unless the packets are altered. Use
695 --unique-ip or tcpreplay-edit to alter packets between itera‐
696 tions.
697 --flow-expiry=number
699 Number of inactive seconds before a flow is considered expired.
700 This option must not appear in combination with any of the fol‐
701 lowing options: no-flow-stats. This option takes an integer
702 number as its argument. The value of number is constrained to
703 being:
704 greater than or equal to 0
705 The default number for this option is:
706 0
707 This option will track and report flow expirations based on the
709 flow idle times. The timestamps within the pcap file are used to
710 determine the expiry, not the actual timestamp of the packets
711 are replayed. For example, a value of 30 suggests that if no
712 traffic is seen on a flow for 30 seconds, any subsequent traffic
713 would be considered a new flow, and thereby will increment the
714 flows and flows per second (fps) statistics.
715 This option can be used to optimize flow timeout settings for
717 flow products. Setting the timeout low may lead to flows being
718 dropped when in fact the flow is simply slow to respond. Config‐
719 uring your flow timeouts too high may increase resources
720 required by your flow product.
721 Note that using this option while replaying at higher than orig‐
723 inal speeds can lead to inflated flows and fps counts.
724 Default is 0 (no expiry) and a typical value is 30-120 seconds.
726 -P, --pid
728 Print the PID of tcpreplay at startup.
729 --stats=number
732 Print statistics every X seconds, or every loop if '0'. This
733 option takes an integer number as its argument. The value of
734 number is constrained to being:
735 greater than or equal to 0
736 Note that timed delays are a "best effort" and long delays
738 between sending packets may cause equally long delays between
739 printing statistics.
740 -V, --version
742 Print version information.
743 -h, --less-help
746 Display less usage information and exit.
747 -H, --help
750 Display usage information and exit.
751 -!, --more-help
753 Pass the extended usage information through a pager.
754 --save-opts [=cfgfile]
756 Save the option state to cfgfile. The default is the last con‐
757 figuration file listed in the OPTION PRESETS section, below.
758 The command will exit after updating the config file.
759 --load-opts=cfgfile, --no-load-opts
761 Load options from cfgfile. The no-load-opts form will disable
762 the loading of earlier config/rc/ini files. --no-load-opts is
763 handled early, out of order.
764
766 Any option that is not marked as not presettable may be preset by load‐
767 ing values from configuration ("RC" or ".INI") file(s). The homerc
768 file is "$$/", unless that is a directory. In that case, the file
769 ".tcpreplay-editrc" is searched for within that directory.
770
772 See OPTION PRESETS for configuration files.
773
775 One of the following exit values will be returned:
776 0 (EXIT_SUCCESS)
778 Successful program execution.
779 1 (EXIT_FAILURE)
781 The operation failed or the command syntax was not valid.
782 66 (EX_NOINPUT)
784 A specified configuration file could not be loaded.
785 70 (EX_SOFTWARE)
787 libopts had an internal operational error. Please report it to
788 autogen-users@lists.sourceforge.net. Thank you.
789
791 Copyright 2013-2018 Fred Klassen - AppNeta Copyright 2000-2012 Aaron
792 Turner For support please use the tcpreplay-users@lists.sourceforge.net
793 mailing list. The latest version of this software is always available
794 from: http://tcpreplay.appneta.com/
795
797 Copyright (C) 2000-2018 Aaron Turner and Fred Klassen all rights
798 reserved. This program is released under the terms of the GNU General
799 Public License, version 3 or later.
800
802 Please send bug reports to: tcpreplay-users@lists.sourceforge.net
803
805 This manual page was AutoGen-erated from the tcpreplay-edit option def‐
806 initions.
807tcpreplay 12 Mar 2019 tcpreplay-edit(1)