resend captured packets from cisco ios? (tcpreplay w/o WireShark)

[carrollha]

Hello again,

As the title of the thread implies, is there a way to replay captured packets (as in a pcap file from the EPC protocol) from cisco ios? I am trying a work around by calling it from a connected computer, but I can't launch tcpreplay dynamically from an EEM script (mainly because I can't target the host OS from the EEM scope).

Basically I am capturing packets in order to delay them until some arbitrary time determined by another (or even the same) EEM script. Is there a function I don't know about that I can call to put previously captured packets (stored in a pcap file) directly back on the bus as if nothing happened?

Thanks in advance,

-Heath

[Joe Clarke · Accepted solution]

You can't replay packets right now.  The upcoming onePK APIs will allow you to do this, however.  If you want to call tcpreplay from your EEM policy, you could send a trap to the host, which triggers the excution, or use the Remote Command Shell policy from http://www.cisco.com/go/easy to telnet/SSH to the host from the device to run the command.

[carrollha]

That response is chock full of WIN. Thank you for pointing me to onePK. It looks like a great solution to my current multi-platform/router hackeneyed approach. The Remote Command Shell policy is pretty sweet, too.

Thanks!