On Fri, Mar 14, 2008 at 1:41 AM, Yann Souchon <[EMAIL PROTECTED]> wrote:
>
>  >>  I'm a new user of tcpreplay tools, under Debian Etch (version 3.0) on
>  >>  intel platform. After a few days trying to use tcpreplay tools, I still
>  >>  have a problem.
>  >
>  > What version of tcpreplay?
>
>  In Debian Etch, the tcpreplay version is 3.0. Sorry it was not really clear
>  on my fist email.
>  http://packages.debian.org/etch/tcpreplay

3.0.beta11?  holy crap that's ancient.  I'm surprised it actually
works. :)  3.2.5 is the latest and highly recommended.

>
>  By "it doesn't work", I mean the traffic on first interface is not replay
>  on the second interface.
>  To try to find the issue, I simplified my command :
>
>  With
>  # tcpdump -i eth0 -s0 -w - -U |  tcpreplay --intf1=eth1 -
>  I can see the traffic from eth0 on eth1, so it works fine.
>
>  When I add tcprewrite command between tcpdump and tcpreplay, it doesn't
>  work.
>
>  As I wrote in my first email, I also tried with files, like :
>  # tcpdump -i eth0 -s0 -w /tmp/dump -U
>  # tcprewrite --portmap=80:8080 --infile=/tmp/dump.cap
>  --outfile=/tmp/dump.rewrite
>  # tcpreplay --intf1=eth1 /tmp/dump.rewrite
>  And it works fine too.
>
>  So I can't understand why tcprewrite doesn't work in real time.

you can try using /dev/stdout instead of '-'.  Older versions may not
of known how to properly translate it, or it could be an issue with
older versions of tcprewrite which always had to process every pcap
file twice.

>  Ok thanks, I will try tcpbridge this weekend.
>  But in my case, with tcpdump/tcprewrite/tcpreplay commands, I can capture a
>  part of full traffic with tcpdump expression.
>
>  Thank you for your quick answer and your help !

No prob.  Good luck.

-- 
Aaron Turner
http://synfin.net/
http://tcpreplay.synfin.net/ - Pcap editing & replay tools for Unix
They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety. -- Benjamin Franklin

-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________
Tcpreplay-users mailing list
Tcpreplay-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/tcpreplay-users

Reply via email to