Tcpreplay 4.6.0 released

[fklassen]

Tcpreplay 4.6.0 is out — a major release built around three things: a new CMake build system, two high-throughput packet-injection backends that now genuinely reach line rate, and a set of security fixes on top of 4.5.5. It also folds in a correctness pass on the TX_RING send path, several new CLI features, and a jumbo-frame bug that had been silently truncating packets.

Highlights

• Completely updated documentation site — tcpreplay.appneta.com now has a modern, task-oriented guide
• CMake build, alongside the existing autotools flow (cmake -B build && cmake --build build)
• AF_XDP (--xdp) now reaches line rate on 1GigE — from ~13k pps to ~305k pps (941 Mbps) on commodity e1000 hardware, a 23× improvement
• io_uring (--io-uring) batches sends instead of one syscall per packet — ~11% less CPU per packet
• --raw — a new PF_INET/SOCK_RAW injection path that sends through the local IP stack
• --loss — random percent packet-loss simulation for testing against non-ideal network conditions (contributed by @dsseng)
• 3 new security advisories fixed on top of 4.5.5, all reported by tinyb0y
• Jumbo frames fixed — a long-standing bug truncated any frame beyond an MTU that needed more than one page of ring buffer to a flat 4096 bytes
• TX_RING reliability fixed — the default Linux send path could silently drop and reorder packets; both are now fixed

Security

Advisory	CVSS	Component
GHSA-fwcr-mqg6-hqmx	7.8 High	Stack buffer overflow in the tcpprep --services file parser
GHSA-m6w7-8497-g9c9	7.7 High	Heap OOB read via --pktlen with --preload-pcap
GHSA-5q26-7fxx-v8fh	7.1 High	Heap OOB access in ARP address rewriting

Full changelog and download: https://github.com/appneta/tcpreplay/releases/tag/v4.6.0

Thanks to @dsseng for --loss, @Steve-Tech for reporting and diagnosing the jumbo-frame truncation, and tinyb0y for the security research behind this release.