Jump to content

capture with tcpdump filter and use tcpreplay to send captured filtered traffic


aclx

Recommended Posts

Posted

Is there a (better) way for my packet squirrel payload? 

a=1

while [ $a -lt 2 ]
do
# Capture MAC addresses that starts with 0x10c and write it in test.pcap
   tcpdump -i eth0 ether [0:2] == "0x010c" -c 5 -w test$a.pcap --print
   

# use tshark to filter on field goose.boolean is true and write it in goose-b1.pcap

   wait 10
   tshark -Y "goose.boolean == 1" -r test1.pcap -w goose-b1.pcap

# use tcpreplay to send goose-b1.pcap
tcpreplay -i eth0 -p 20000 -l 10000 goose-b1.pcap
done
 

Archived

This topic is now archived and is closed to further replies.

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...