tcpliveplay - Man Page

Replays network traffic stored in a pcap file on live networks using new TCP connections


tcpliveplay [-flags] [-flag [value]] [--option-name[[=| ]value]] <eth0/eth1> <file.pcap> <Destination IP []> <Destination mac [0a:1b:2c:3d:4e:5f]> <'random' dst port OR specify dport #>

This program, 'tcpliveplay' replays a captured set of packets using new TCP connections with the captured TCP payloads against a remote host in order to do comprehensive vulnerability testing.


The basic operation of tcpliveplay is it rewrites the given pcap file in a scheduled event format and responds with the appropriate packet if the remote host meets tcp protocal's SEQ/ACK expectation. Once expectations are met, then the local packets are sent with the same payload except with new tcp SEQ & ACK numbers meeting the response from the remote hose.

The input pcap file are rewritten to start at the first encounter of the SYN packet for correct operation making this packet be the first action in the event schedule of local host doing the replay.

For more details, please see the Tcpreplay Manual at:


-d number, --dbug=number

Enable debugging output. This option may appear up to 1 times. This option takes an integer number as its argument. The value of number is constrained to being:

in the range  0 through 5

The default number for this option is:


If configured with --enable-debug, then you can specify a verbosity level for debugging output.  Higher numbers increase verbosity.

-V,  --version

Print version information.

-h,  --less-help

Display less usage information and exit.

-H,  --help

Display usage information and exit.

-!,  --more-help

Pass the extended usage information through a pager.

--save-opts [=cfgfile]

Save the option state to cfgfile.  The default is the last configuration file listed in the Option Presets section, below. The command will exit after updating the config file.

--load-opts=cfgfile, --no-load-opts

Load options from cfgfile. The no-load-opts form will disable the loading of earlier config/rc/ini files.  --no-load-opts is handled early, out of order.

Option Presets

Any option that is not marked as not presettable may be preset by loading values from configuration ("RC" or ".INI") file(s). The homerc file is "$$/", unless that is a directory. In that case, the file ".tcpliveplayrc" is searched for within that directory.


See Option Presets for configuration files.

Exit Status

One of the following exit values will be returned:


Successful program execution.


The operation failed or the command syntax was not valid.


A specified configuration file could not be loaded.


libopts had an internal operational error.  Please report it to  Thank you.


Copyright 2012 Yazan Siam For support please use the mailing list. The latest version of this software is always available from:


This manual page was AutoGen-erated from the tcpliveplay option definitions.


11 Jun 2023