I know the spoofing code works on FreeBSD 4.x. I'm not sure about other systems, there isn't a 100% portable way to write something like this.

flow-receive will store the IP address of the exporter in each flow. If -s is used with a localip of 0, then the IP address in the flow is used.

flow-send -s 0/10.0.0.1/9999 would use the IP in the flow.
flow-send -s 10.9.9.9/10.0.0.1/9999 would use 10.9.9.9 as the source IP address.


On Jul 27, 2004, at 8:58 AM, Pablo Varela wrote:

Hi,

I'm trying to understand the usage of IP spoofing in flow-send and I
can't imagine what IP address it uses. Has anyone tried this?

My intentions are to have a chain like this:
flow-receive ... | flow-filter ... | flow-send -s ...
so I can send the netflow packets with the source IP set to the
original one.

Pablo


______________________________________________ Yahoo! lanza su nueva tecnolog�a de b�squedas �te atreves a comparar? http://busquedas.yahoo.es _______________________________________________ Flow-tools mailing list [EMAIL PROTECTED] http://mailman.splintered.net/mailman/listinfo/flow-tools


_______________________________________________ Flow-tools mailing list [EMAIL PROTECTED] http://mailman.splintered.net/mailman/listinfo/flow-tools

Reply via email to