I'm having an issue with replaying Wireshark packets. I've captured data being received on a remote network on a port - say port 12345. I'm trying to change the destination IP in the capture (Idid so using bittwist) but when I replay the packets, the machine I'm trying to send the packets to on my local network is not receiving them, and it's listening on the same port (12345). When I run a capture on third machine on my network (not sending or receiving) I do see the packets being broadcast. Does anyone have any ideas? asked 02 Feb '16, 06:50  Ultron |
This is a static archive of our old Q&A Site.
Please post any new questions and answers at ask.wireshark.org.
Have you changed the mac address, too?
Yes - source and destination MAC addresses have been changed. I also tried to modify the data to remove the replies from the host so I would only send the packets to the server that should be receiving/processing the data (with none of the original replies). The listener I have running never receives the replayed data.
How do you know your receiving station is properly setup? Have you tested that, with netcap for instance? What type of traffic is this anyway? UDP/IP?