hi Aaron, it's wired that i can't the receive the reply email other than seeing them from the digest. so i copy all the content here and post them again.
client ------------------------Server (http server) , i captured the packet
on client side. Please see the attached.
(192.168.1.34) 10.208.68.174
i am going to rewrite the pcap file to let it look like the traffice happend
as following topology, so only the packet sent by server would be rewroten.
i was looking for the way from the tcprewirte guilde but it seems it
doesn't support this type of rewrite.
client -----------NAT device --------------------------------Server ( http
server),
(192.168.1.34) | (10.208.2.14)
10.208.68.174
egressIP
And i did the follow operation to make it happend,
1) To generate a cache file to define the rewrite only happend to the
traffice from server side.
[EMAIL PROTECTED] ~]# tcpprep --include=S:10.208.68.174/32 --pcap
http.cap--cachefile=
http.cache
Must specify a processing mode: -a, -c, -r, -p
[EMAIL PROTECTED] ~]# tcpprep --auto=brideg --include=S:10.208.68.174/32--pcap
http.cap --cachefile=http.cache
2) To update the dest ip to the Egress ip of the NAT device, but segment
fault occurred.
[EMAIL PROTECTED] ~]# tcprewrite --pnat=192.168.1.0/24:10.208.2.14--cachefile=
http.cache --infile=http.cap --outfile=http_server.cap
Segmentation fault
could you please help to check this and i can provide any information you
think necessary.
Thanks!
Fei
Message: 1
Date: Tue, 19 Feb 2008 21:08:32 +0800
From: Leon <[EMAIL PROTECTED]>
Subject: [Tcpreplay-users] How to update the IP address by tcprewrite?
To: tcpreplay-users@lists.sourceforge.net
Message-ID:
<[EMAIL PROTECTED]>
Content-Type: text/plain; charset="iso-8859-1"
hi all,
i came across a problem when I was going to rewrite the captured packet to
reflect the NAT device in the middle of endpoint.
client ------------------------Server (http server) , i captured the packet
on client side.
i am going to rewrite the pcap file to let it look like the traffice happend
as following topology, so only the packet sent by server would be rewroten.
i was looking for the way from the tcprewirte guilde but it seems it
doesn't support this type of rewrite.
client -----------NAT device ---------------Server ( http server),
|
egressIP
Is there anyone can help on this issue?
Thanks
Leon
-------------- next part --------------
An HTML attachment was scrubbed...
------------------------------
Message: 2
Date: Tue, 19 Feb 2008 09:10:06 -0800
From: "Aaron Turner" <[EMAIL PROTECTED]>
Subject: Re: [Tcpreplay-users] How to update the IP address by
tcprewrite?
To: "Main forum for tcpreplay" <tcpreplay-users@lists.sourceforge.net>
Message-ID:
<[EMAIL PROTECTED]>
Content-Type: text/plain; charset=ISO-8859-1
On Feb 19, 2008 5:08 AM, Leon <[EMAIL PROTECTED]> wrote:
> hi all,
>
> i came across a problem when I was going to rewrite the captured packet to
> reflect the NAT device in the middle of endpoint.
>
> client ------------------------Server (http server) , i captured the
packet
> on client side.
>
> i am going to rewrite the pcap file to let it look like the traffice
happend
> as following topology, so only the packet sent by server would be
rewroten.
> i was looking for the way from the tcprewirte guilde but it seems it
> doesn't support this type of rewrite.
>
> client -----------NAT device ---------------Server ( http server),
> |
> egressIP
>
Hi Leon,
Could you give more details? Maybe fill in some sample IP's for each
of the devices (before and after). I'm not really 100% I understand
what it is you're trying to do.
--
Aaron Turner
http://synfin.net/
http://tcpreplay.synfin.net/ - Pcap editing & replay tools for Unix
They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety. -- Benjamin Franklin
http.cap
Description: Binary data
------------------------------------------------------------------------- This SF.net email is sponsored by: Microsoft Defy all challenges. Microsoft(R) Visual Studio 2008. http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________ Tcpreplay-users mailing list Tcpreplay-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/tcpreplay-users
