For those who are interested with this libpcap based networking suite, please do check out Bit-Twist 0.7, development release here: 1. http://bittwist.sourceforge.net/ (Bit-Twist homepage) 2. http://sourceforge.net/projects/bittwist/ (SF.net project page) Bit-Twist is a simple and powerful libpcap-based Ethernet II (IEEE 802.3) packet generator that comes complete with a comprehensive pcap capture file editor and a multiport link speed capability Ethernet bridge! It is designed to compliment tcpdump, which by itself has done a great job in capturing network traffic. With Bit-Twist, you can now regenerate the captured traffic onto a live network. Packets are generated from saved tcpdump capture file (trace file). Bit-Twist also comes with a comprehensive trace file editor to allow you to change the contents of a trace file. You can also append your own payload to each packet in the trace file (IP/TCP/UDP/ICMP header checksum is corrected automatically). Although packet generator is generally useful for simulating networking traffic, testing firewall/IDS/IPS, or troubleshooting various network problems, Bit-Twist (together with tcpdump) has also proven itself to be useful for educational purposes especially in Computer Network classes. As with most of the existing packet generators, this is not immediately trivial (e.g. many times, they are complex, huge, and overloaded with features). Bit-Twist prevails here with its simplicity in its implementation, usage, and deployment which helps cut the learning curve of students' and general users alike. Currently, Bit-Twist compiles on *BSD and Linux and it works under Ethernet II (802.3) network with a MTU of up to 1500 bytes on 10Mbps (10Base-T Ethernet) or 100Mbps (Fast Ethernet) link speed. --------------------------------- New Yahoo! Messenger with Voice. Call regular phones from your PC and ...
Interesting - how does it differ from /usr/ports/net-mgmt/tcpreplay ? Regards, Brian. _______________________________________________ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "freebsd-net-unsubscribe@freebsd.org"
Thanks Brian. Simply put Bit-Twist is smaller, do more, medium specific (Ethernet II - IEEE 802.3) suite. Bittwist (packet generator) does not differs much from tcpreplay program. I would admit if you say tcpreplay can do everything that bittwist can do. But bittwist implementation is much simpler and it uses only libpcap library without libnet dependency. Its capture file editor, bittwiste, allow you to change most fields in Ethernet, ARP, IP, ICMP, TCP, and UDP headers and you can specify your own payload. It is possible for the payload to cover the ICMP, TCP, or UDP header itself (checksum is corrected automatically). Tcprewrite (part of Tcpreplay suite) allows you to change src/dst MAC/IP/port only, but, it supports VLAN frames (Bit-Twist does not). Bittwistb (bridge) aids the injection of packets from an end host which get forwarded across different LAN segments. It supports multiple ports (up to 8, or more if you want it to). Tcpbridge supports only 2. Simply put, Bit-Twist is created not to compete with any existing similar projects, i.e. Tcpreplay, but it is here in favor of freedom of choice :) and also, Bit-Twist is currently being used as a practical teaching material in Computer Network classes. Interesting - how does it differ from /usr/ports/net-mgmt/tcpreplay ? Regards, Brian. --------------------------------- Love cheap thrills? Enjoy PC-to-Phone calls to 30+ countries for just 2
There is now a port for this available at net/bittwist if anyone is interested in playing with it further. It doesn't build under 4.x due to a redefinition of in_addr_t and a lack of round(), but it builds under more recent versions. :) -- WXS _______________________________________________ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "freebsd-net-unsubscribe@freebsd.org"
I haven't tried either one of these, but will note that my favorite program in this space - if one wants to hack interactively - is "netdude", which is available from sourceforge. FWIW. allman
