appneta/tcpreplay

Health v2 · maintenance only

Adoption not part of the score

1344 stars · 295 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

Tcpreplay is a suite of GPLv3 command-line utilities for editing and replaying captured network traffic (pcap files) back onto the network at speeds from a trickle to full wire rate. It includes tools for classifying client/server traffic, rewriting Layer 2-4 headers, and replaying captures through firewalls, IDS/IPS, and NetFlow appliances for testing.

Use cases

• replay a pcap capture onto a test network at original timing or line rate
• rewrite MAC/IP addresses and ports in a capture to retarget it at a lab device
• test firewall, IDS/IPS, or NetFlow appliances with realistic repeatable traffic
• split a capture into client and server sides for two-NIC in-line testing
• replay a captured TCP session against a live server
• measure flows-per-second performance of flow-based network appliances

When to choose

• you need to push real captured packets back onto the wire for device testing
• you want to tune IDS/IPS or NetFlow appliances against realistic traffic at controlled rates
• you need to rewrite packet headers to retarget captures at a lab environment
• you need high-rate packet injection with netmap, AF_XDP, or io_uring fast paths

When to avoid

• you need to synthesize new traffic rather than replay existing captures
• you need protocol-aware TCP session synchronization against arbitrary servers (only tcpliveplay handles a single TCP stream)
• you want a GUI-based traffic generator

Facets

cli-tool · maturity active

networking benchmarking security developer-tools networking security performance developer-tools windows bsd cli pcap packet-replay traffic-generation netflow ids-testing firewall-testing packet-crafting netmap af-xdp linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="appneta/tcpreplay")