This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Hi there,

I'm looking to record some videos from the Wireshark interface and for that purpose I would like to simulate a scenario where I'm live capturing the data while recording the screen. For practical reasons, however, it would be ideal if I could "play" a pcap file so that it appears as if the data is coming in message-by-message (as in live capture) at the original speed of the incoming transmissions.

Is this possible in Wireshark or via some plugin?

Thank you, Martin

asked 10 May, 14:23

mfcss's gravatar image

mfcss
215710
accept rate: 0%


I think there are tools that can take a capture file and replay it, using the packet time stamps to determine when to send the packets, so that, for example, if two packets in the file have time stamps 1 second apart, the packets will be sent 1 second apart.

That may not be what you want, however, as it causes actual network traffic to occur.

In theory, a program could be written that reads a capture file and writes the records from the capture file to the standard output, with the delays between packet records being determined by the packet time stamps; you could then start Wireshark up, capturing from a pipe, and have the program write to the pipe. That would look a little different, when starting up, from a live capture, but it'd look very similar to a live capture as the packets come in. I don't know of such a tool, however.

permanent link

answered 10 May, 21:39

Guy%20Harris's gravatar image

Guy Harris ♦♦
17.4k335195
accept rate: 19%

Maybe you can use 'tcpreplay'?

permanent link

answered 13 May, 10:39

r00t070's gravatar image

r00t070
6337
accept rate: 0%

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×1,620
×549
×238
×24
×6

question asked: 10 May, 14:23

question was seen: 740 times

last updated: 13 May, 10:39

p​o​w​e​r​e​d by O​S​Q​A