Yep, 3.0.beta10 is available here. So far, at least one person has compiled it successfully, so at least this release is already better then beta8. :)

Anyways, as stated in the release notes, this is the final beta release for 3.0. I’m planning on one release candidate which will have a working tcpbridge (which has been broken since moving all the editing code to libtcpedit) and then put out 3.0.0 shortly after that depending on any bugs people find.

Anyways, give it a try and let me know how it well works for you!

Just a quick note to everyone paying attention that 3.0.beta10 is almost ready. Some rather significant changes since beta9:

• Libnet is now completely optional. I’ve created an abstraction layer supporting BSD’s BPF, Linux’s PF_PACKET, libpcap’s pcap_inject() and libnet’s packet injection methods. So while you can still use libnet, in many cases you won’t need it which should hopefully make installation a lot easier for many people.
• tcpprep and tcprewrite no longer need to run as root. tcpreplay still does for obvious reasons.
• A new and improved packet timing method is available in tcpreplay. Those people needing more accurate inter-packet delays should be better served by this method.
• tcprewrite now can skip rewriting broadcast/multicast IP and MAC addresses which is good news when your pcap contains ARP’s or DHCP packets.
• Various smaller bug fixes which some people noticed and some people didn’t.

Well looks like all the critical bugs with the tcpreplay 3.0.beta8 were fixed in beta9 (at least everyone has stopped complaining), and so I’ve started working on beta10 which should hopefully be the final beta release for 3.0. Mostly the goal of beta10 is to remove libnet as a dependancy which should make compiling tcpreplay much easier for many people.

After beta10, I’ve scheduled one release candidate for early October to finish up tcpbridge and hopefully the offical 3.0 release will go out in early November. So based on past experiance and schedule slippages, I’d guess we’ll see 3.0 sometime around Christmas. :)

Either way, just want to remind everyone to keep those bug reports and feature requests coming in.

After nearly a year between releases (has it been that long??), 3.0beta8 is finally out the door. The changes are actually quite massive due to a huge rewriting effort; and with many additional unit tests (via ‘make test’) code quality should be pretty good too.

This is the first release with a working tcprewrite and modular packet editing code (tcpedit). I\’ve also included a number of end-user requested features. The only “issue” really left right now is that tcpbridge is going out the door untested and I doubt it works. I’ll be sure it’s ready for 3.0 though.

Anyways, be sure to give it a download and file any bugs that you find.

Woot. Actually making progress with the tcpedit libraryization. The API is finally coming together and seems usable. One of these days, I should make libtcpedit a plugin chain rather then a bunch of static code, but that’s like a 4.0 feature. :)

Anyways, hopefully in a couple of weeks beta8 will be ready to go. I don’t think tcpbridge will be working, but that can come later.

I’ve come to the realization that my blog is a much better way of reporting of what’s going on with tcpreplay then the news section, so I’ve decided to move to using the blog for now on.

Anyways, with that said, tcpreplay is still in active development as I have time. I know it’s been a long long time since the last 3.0beta release, but since then I’ve doing a major rewrite to clean up the code. Like most rewrites I’m sure it’ll pay off dividends in the long run, but it’s taking longer then I had hoped. Once the rewrite is complete, I’ll move towards a release early, release often methodology.

I’m also still in the process of updating all the docs so that people can be more familar with the features in the Tcpreplay suite- lately I’ve met a lot of people who don’t know that tcpreplay can edit packets or supports splitting traffic between two interfaces.

So my friend Chris sent me this link to yet another tcpreplay copycat. There’s already IDS Informer and Traffic IQ.

Of course, the above tools have pretty GUI’s and have some features not found in tcpreplay, but the fact is that if you take tcpreplay, tcpdump, ethereal and NetDude you get 60-90% of the functionality at 0% of the cost.

Anyways, I’ll bet there are plenty of other tcpreplay look-alikes… If you know of any, leave a comment and let me know! Even better, if you’ve bought one of these tools, why did you pick it over the alternatives?