{"id":465,"date":"2007-03-08T04:39:47","date_gmt":"2007-03-08T04:39:47","guid":{"rendered":"https:\/\/www.darknet.org.uk\/2007\/03\/preplay-a-pcap-network-traffic-replay-tool-for-windows\/"},"modified":"2015-09-09T19:40:17","modified_gmt":"2015-09-09T11:40:17","slug":"preplay-a-pcap-network-traffic-replay-tool-for-windows","status":"publish","type":"post","link":"https:\/\/www.darknet.org.uk\/2007\/03\/preplay-a-pcap-network-traffic-replay-tool-for-windows\/","title":{"rendered":"PReplay &#8211; A pcap Network Traffic Replay Tool for Windows"},"content":{"rendered":"<p>There are not many good tools for replaying traffic, most people use WireShark (formely known as Ethereal) for capturing the traffic, but what happens if you want to take that capture and reply it over the wire?<\/p>\n<p>Someone has this problem so they decided to code their own solution, thankfully for us! There are quite a few tools to do this for *nix based systems but none for Windows, so here we go, a traffic replay tool for the Windows platform!<\/p>\n<p>PReplay is a utility to replay captured data over the network, its main feature is that it will record the time difference between two packets (not very accurately but it works for micro\/millisecond difference) it reads the capture file and then determines the time difference for the next packet.<\/p>\n<p>You can give list of capture file which you want to send in the Preplay.ini in the [SendingFileName] section as below:<\/p>\n<pre><code>1=IPDump.cap\r\n2=IPDump2.cap<\/code><\/pre>\n<p>Semicolon (;) is used for commenting a line you don&#8217;t want the program to read, so you can<br \/>\ncomment out the file name which you don&#8217;t want to send like this:<\/p>\n<script async src=\"https:\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-3033787195489589\"\r\n     crossorigin=\"anonymous\"><\/script>\r\n<!-- Darknet Responsive Post Ad Links [previously link ad unit] -->\r\n<ins class=\"adsbygoogle\"\r\n     style=\"display:block\"\r\n     data-ad-client=\"ca-pub-3033787195489589\"\r\n     data-ad-slot=\"5456620019\"\r\n     data-ad-format=\"auto\"><\/ins>\r\n<script>\r\n     (adsbygoogle = window.adsbygoogle || []).push({});\r\n<\/script>\n<pre><code>[SendingFileName]\r\n1=IPDump.cap\r\n;2=IPDump2.cap<\/code><\/pre>\n<p>It will not send 2nd file.<\/p>\n<p>SendingFilePath, here you can specify the directory which contains the captured files.<\/p>\n<p>You can download PReplay here:<\/p>\n<p><a href=\"https:\/\/www.darknet.org.uk\/content\/files\/preplay.zip\">preplay.zip<\/a><\/p>\n<p>This is version 1.1 which has a few fixes such as the ability to change the MAC and IP address of the gateway and client machine.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>There are not many good tools for replaying traffic, most people use WireShark (formely known as Ethereal) for capturing the traffic, but what happens if you want to take that capture and reply it over the wire? Someone has this problem so they decided to code their own solution, thankfully for us! There are quite [&hellip;]<\/p>\n","protected":false},"author":25,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_seopress_robots_primary_cat":"","_seopress_titles_title":"","_seopress_titles_desc":"","_seopress_robots_index":"","_genesis_hide_title":false,"_genesis_hide_breadcrumbs":false,"_genesis_hide_singular_image":false,"_genesis_hide_footer_widgets":false,"_genesis_custom_body_class":"","_genesis_custom_post_class":"","_genesis_layout":"","footnotes":""},"categories":[9,5,11,4],"tags":[1706,1704,8858,8861,592,8857,1705],"featured_image_src":null,"featured_image_src_square":null,"author_info":{"display_name":"Darknet","author_link":"https:\/\/www.darknet.org.uk\/author\/darknet\/"},"_links":{"self":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/posts\/465"}],"collection":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/users\/25"}],"replies":[{"embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/comments?post=465"}],"version-history":[{"count":0,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/posts\/465\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/media?parent=465"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/categories?post=465"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/tags?post=465"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}