On Tue, May 20, 2008 at 11:26 AM, Mohamed Kouki <[EMAIL PROTECTED]> wrote: > Hi Aaron i'm trying to replay trafic through a non transparent firewall , > for this i'm trying to change the mac addresses of the packet but when i use > : > $ tcprewrite --enet-dmac=00:44:66:FC:29:AF,00:55:22:AF:C6:37 > --enet-smac=00:66:AA:D1:32:C2,00:22:55:AC:DE:AC --cachefile=input.cache > --infile=input.pcap --outfile=output.pcap > > the mac addresses change for all the trace in a unique directionso all the > packets have the same source and destination addresses with different ip > addresses
$10 says tcpprep split all the traffic as one way, but since you didn't give me your input.cache file I have no way of knowing. Using the -I or -S flag with tcpprep would tell you. Also, while risking sounding like a broken record, it would be nice if you told me what version of tcpreplay you're using. > i'm waiting for your answer man I'm sure you are. BTW, please stop with the replying to emails which have nothing to do with your question- or at least trim the email content. -- Aaron Turner http://synfin.net/ http://tcpreplay.synfin.net/ - Pcap editing & replay tools for Unix They that can give up essential liberty to obtain a little temporary safety deserve neither liberty nor safety. -- Benjamin Franklin ------------------------------------------------------------------------- This SF.net email is sponsored by: Microsoft Defy all challenges. Microsoft(R) Visual Studio 2008. http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/ _______________________________________________ Tcpreplay-users mailing list Tcpreplay-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/tcpreplay-users Support Information: http://tcpreplay.synfin.net/trac/wiki/Support