General Question About Replay Limitations

StamusNetworks / gophercap

Accurate, modular, scalable PCAP manipulation tool written in Go.

GNU General Public License v3.0

85 stars 12 forks source link

General Question About Replay Limitations #2

Open alexpoloniewicz opened 3 years ago

alexpoloniewicz commented 3 years ago

Just curious if gophercap is capable of manipulating packets while replaying a previously recorded pcap file, i.e. can it manipulate syn and ack packets in real time in order to complete a successful handshake with a server?

markuskont commented 3 years ago

Hi. No, it does not currently support manipulating packets. Could you elaborate your use-case? It sounds like you want to implement some kind of "replay session timeout" in case there was packet loss over the wire?

In that case it would require building a basic session table to decide if flow has naturally timed out or not. Currently gopher works only per packet level, only inserting time.Sleep() between packets to maintain intervals.