Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Bug] Is it feasible to complete the TCP handshake by replaying SYN+ACK using tcpliveplay? #825

Open
ruoniao opened this issue Sep 15, 2023 · 2 comments

Comments

@ruoniao
Copy link

ruoniao commented Sep 15, 2023

Hello everyone.I encountered the same issue as this one when using tcpliveplay.
I used a complete TCP packet from the diagram below for replay.

image

But it seems that Linux automatically sends an RST packet I suspect that it's because the network interruption has a higher priority than tcprelay, causing the Linux system to send an RST.
image

I try use iptables command (iptables -I OUTPUT -p tcp -m tcp --dport 5000 --tcp-flags RST RST -j DROP) drop this package , But tcpreply
image

But It does't work.So, I am suspecting if this method of sending TCP payload is feasible? Or is it a better choice to establish a TCP connection using sockets AF_INIT to send and receive payloads?

Looking forward to your reply.

@jewdas1984
Copy link

Hello @ruoniao, exactly the same issue. Cannot get it to work.

@fklassen
Copy link
Member

fklassen commented Jun 8, 2024

Sorry guys, the person who wrote tcpliveplay has left the project, and I cannot find anyone to clean it up. I may need to drop it. I will leave it in for another release cycle and if I cannot find anyone to support it, I'll drop it from the product suite.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

3 participants