Jul 20, 2023

Tool to replay saved packet capture files

Tcpreplay is aimed at testing the performance of a Network Intrusion Detection System by replaying real background network traffic in which to hide attacks.

Tcpreplay allows you to control the speed at which the traffic is replayed, and can replay arbitrary libpcap traces.

Unlike programmatically-generated artificial traffic which doesn’t exercise the application/protocol inspection that a NIDS performs, and doesn’t reproduce the real-world anomalies that appear on production networks asymmetric routes, traffic bursts/lulls, fragmentation, retransmissions, etc., tcpreplay allows for exact replication of real traffic seen on real networks.

Checkout these related ports: