On Tue, Mar 15, 2011 at 4:24 AM, DjamOlsky <djamol...@gmail.com> wrote: > Hi, > I am experiencing difficulties with the tcprewrite command (following > the case described here: > http://tcpreplay.synfin.net/wiki/usage#PassingTrafficThroughaFirewallRouterNon-TransparentDevice) > I am trying to replay a capture between two routers (+ an IPS between > them). > I think I am doing a misunderstanding with the --enet-dmac and > --enet-smac parameters. > For a bi-directionnal traffic > (http://tcpreplay.synfin.net/wiki/tcprewrite#RewritingLayer2), there are > two mac addresses to use for each parameter. It is not clearly explained > in the documentation pages... ;-) > --enet-dmac > 1st param: mac of the router interface (server side) ? > 2nd param: mac of the router interface (client side) ? > --enet-smac > 1st param: mac of the server traffic from the capture file? > 2nd param: mac of the client traffic from the capture file? > My questions are easy: firstly, am I using the right sampe case? > If yes, is everything ok with how I use the tcprewrite command? > Thanks for your reading and any help you could provide me.
You're doing it right. Since you're replaying traffic through one or more Layer 3 devices, you'll need to replay traffic out two interfaces with tcpreplay. The first MAC address listed in --enet-smac and --enet-dmac are for the first interface (-i) and the second MAC addresses are used for the second interface (-I). Honestly, I wish I could come up with a better naming convention then Server/Client or Primary/Secondary... if anyone has any ideas, please let me know! -- Aaron Turner http://synfin.net/ Twitter: @synfinatic http://tcpreplay.synfin.net/ - Pcap editing and replay tools for Unix & Windows Those who would give up essential Liberty, to purchase a little temporary Safety, deserve neither Liberty nor Safety. -- Benjamin Franklin "carpe diem quam minimum credula postero" ------------------------------------------------------------------------------ Colocation vs. Managed Hosting A question and answer guide to determining the best fit for your organization - today and in the future. http://p.sf.net/sfu/internap-sfd2d _______________________________________________ Tcpreplay-users mailing list Tcpreplay-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/tcpreplay-users Support Information: http://tcpreplay.synfin.net/trac/wiki/Support
