diff --git a/tcpreplay.md b/tcpreplay.md
new file mode 100644
index 0000000..f7afa60
--- /dev/null
+++ b/tcpreplay.md
@@ -0,0 +1,11 @@
+# Replay trace
+```
+tcpreplay -i eth0 capture.pcapng
+```
+
+# Replace IP address
+Replace IP address of endpoint hosts (eg. new destination 10.0.0.2, new source 10.0.0.1):
+```
+tcpprep --auto=server --pcap=sbirulo.pcapng --cachefile=stream.cache
+tcprewrite --infile=original.pcapng --outfile=modified.pcapng --endpoints=10.0.0.2:10.0.0.1 --cachefile=stream.cache
+```