Skip to content

[Bug] tcprewrite --fixlen not working #582

@aurimasplu

Description

@aurimasplu

Describe the bug
I have packet truncated packet capture file and Wireshark is not interpreting packets correctly. So I am trying tcprewrite --fixlen=pad or trunk to fix capture file, but it just goes through file and does not do anything.
Packet example:

image

When I do verbose I see this meassage:
11:00:56.1590051656 IP truncated-ip - 565 bytes missing! x.x.x.x.59038 > d.d.d.d.443: Flags [P.], seq 462872182:462873003, ack 2319763168, win 2048, length 821

To Reproduce
Steps to reproduce the behavior:

  1. tcprewrite --fixlen=pad -i input.pcap -o output.pcap -v

Expected behavior
Pading added or IP length rewriten

System (please complete the following information):

  • OS: RHEL
  • OS version 7.6
  • Tcpreplay Version 4.3.2-1.el7

Metadata

Metadata

Assignees

Labels

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions