8

I have captured some packets in Wireshark and need to replay those again in any way.

Some One
  • 103
  • 1
  • 1
  • 5
  • https://www.google.com/search?q=replay+pcap Note wireshark provides several [commandline programs](https://www.wireshark.org/docs/man-pages/) that can select, split, combine, and alter the contents of pcap files so you could replay data partly the same as but partly different from what was captured. – dave_thompson_085 Jun 27 '21 at 11:05
  • Does this answer your question? [Sending packets captured with Wireshark](https://stackoverflow.com/questions/21279666/sending-packets-captured-with-wireshark) – stackprotector Oct 15 '21 at 07:56

2 Answers2

6

The Wireshark wiki Tools page lists many packet capture related tools, among them some tools that can replay packets such as Bit-Twist, PlayCap, Scapy, tcpreplay and several others.

Christopher Maynard
  • 5,702
  • 2
  • 17
  • 23
  • I'm still trying to find a suitable tool. the rules are simple. 1) must work. :) 2) must not require cygwin (which knocks a lot of them out) 3) must work on windows 10 if wireshark is installed (note that by default wireshark does not install the winpcap api by default!). 4) must actually be free. (also knocks out a lot of them) 5) must allow you to repeatedly retransmit the packets, ideally without limit. 5) must allow you to retransmit with the same timing they were originally sent at. still looking for something that does that all. – Mr. Beeblebrox Jun 01 '22 at 14:03
0

I just had to do this on a Windows machine. Most all of the methods required a UNIX machine or cygwin. Colasoft Packet Player worked great without having dependencies on other software or drivers.

Rick S.
  • 1