-
Notifications
You must be signed in to change notification settings - Fork 290
Closed
Labels
Description
Describe the bug
I have packet truncated packet capture file and Wireshark is not interpreting packets correctly. So I am trying tcprewrite --fixlen=pad or trunk to fix capture file, but it just goes through file and does not do anything.
Packet example:
When I do verbose I see this meassage:
11:00:56.1590051656 IP truncated-ip - 565 bytes missing! x.x.x.x.59038 > d.d.d.d.443: Flags [P.], seq 462872182:462873003, ack 2319763168, win 2048, length 821
To Reproduce
Steps to reproduce the behavior:
- tcprewrite --fixlen=pad -i input.pcap -o output.pcap -v
Expected behavior
Pading added or IP length rewriten
System (please complete the following information):
- OS: RHEL
- OS version 7.6
- Tcpreplay Version 4.3.2-1.el7
Reactions are currently unavailable
