simple-replay

simple-replay allows you to re-inject packets in real time. Currently simple-replay will only replay data packets. If you are interested in changing this, look at simple-replay.c::got_packet, somewhere around line 178. simple-replay relies on lorcon for its packet injection capabilites. This means that it can select different drivers at runtime.

This example tells simple-replay to use the madwifi driver (-r), to re-inject data packets that have the FromDS (-F) bit set with probability 100 (-p 100), to log all the packets it re-injects to log.pcap, and to write all the packets it sees out to debug.pcap. (The union of debug.pcap and log.pcap are what other people on the same channel would see)

Generally, you will only want to specify packets with the ToDS (-T) or FromDS (-F) bit set, but not both. For a good example why, check out the examples/ping-ap/no-ds-drops subdirectory.

./simple-replay -i ath0 -c 1 -r madwifi -p 100 -l log.pcap -e debug.pcap -F

and the following screenshot shows the results on an unsuspecting bystander

ping 192.168.1.1