Ask Your Question

Revision history [back]

click to hide/show revision 1
initial version

Effective Way to Replay Pcap Files?

Hi All,

I'm new to this forum but I was curious if anybody has had any experience (or theories) on how to get pcap files replayed over a network?

I've tried using TCPReplay before but it doesn't work as I intended it to work. A good test for me is to replay a test email to myself, write those packets to a pcap file, and then try to replay them using TCPReplay. However, whenever I do that I don't see a copy of the email in my inbox. My theory is that there is an issue with the SYN and ACK flags of the recorded packets and the email client (or something) is picking it up as duplicate packets and won't resend them.

Does anybody have any advice or any software that can effectively resend an email if there is a pcap file of an email being sent?