Wireplay Compilation Guide
Dependencies
Installation for Ubuntu/Debian
sudo apt-get install ruby1.8 ruby1.8-dev libruby1.8 \
libpcap0.8 libpcap0.8-dev libnet1 libnet1-dev
Compile
Download and extract wireplay or checkout from svn:
By default Makefile will try to link against libnids-1.23 in the current directory because of the custom patches (bug fixes) in libnids.
So before you try to compile wireplay, you need to compile libnids: go to ./libnids-1.23:
./configure --enable-shared --disable-libglib
make
Then go to wireplay root:
make
In case compilation fails, try to tickle around with the variables in Makefile or drop a bug report to AUTHORS
In case wireplay crashes everytime, most probably you are linked against system installed libnids, verify:
ldd ./wireplay
If you get the following error while running make on libnids-1.23: killtcp.c:121:6: error: #elif with no expression make1?: [killtcp.o] Error 1
The solution is to edit killtcp.c, locate the LAST #elif in the file and change it to #else, then run make again.
BTW I'm on Fedora Core 13 for others trying to build this.
If you get the error: src/whook_rb.c:11:44: error: ruby.h: No such file or directory then edit the wireplay Makefile (not libnids) and look for this line: RUBYINC := /usr/lib/ruby/1.8/i486-linux Mine was "i386", then I got past that error.
If you get the error: gdb -L/home/jpangburn/open_source/wireplay/wireplay-read-only/libnids-1.23/src/ -lnids -lpcap -lnet -lruby1.8 /usr/bin/ld: cannot find -lruby1.8 Then perhaps your Ruby installation (like mine) was not named that way. Edit the Makefile and change it to "-lruby" without the 1.8 on the end.
After these changes it compiled and at least gave me the help screen.
Jesse
Is there any installation guide for osX 10.6.7 ?
cheers, Aan Kasman
Does Wireplay supports IPV6?. Please let us know.
Hi,
I am using wireplay to pump HTTP capture. My setup looks like this,
(10.2.12.158) <---------> (10.2.12.154)
In captures,
Client ip: 10.2.12.158 Server ip: 10.2.12.154
Note: I modified the captures.
I am trying to pump the pcap, but it shows an error like this,
./wireplay --role client -F test_tmp1.pcap --target 10.2.12.154 --port 32924 [] Loading TCP sessions from pcap dump.. count:1 1 10.2.12.158 32924 10.2.12.154 80 0x3ca382a6 0xaf39ed02
Enter session no. to replay: 1 [] Initializing hooks [] Initializing Ruby hook (Hook File: (null)) [] Registering hook: ruby [] Connecting to target host.. [-] Failed to connect
Any help is really appreciable.