 | 1 | initial version |
Without the -D option, but with -i option, all packets are considered inbound. So for outbound they must be swapped.
You can specify the dummy IP-addresses of your choosing using -4 dst,src. For example:
text2pcap -D -i 132 -4 10.2.3.4,10.2.3.56 ...
Then "O" respresents src->dst and "I" dst->src, as expected.
Instead of creating dummy headers it is also possible to feed text2pcap with all headers, thus including Ethernet and IP. Then the data already contains the direction.